Actions
Task #150
closed
Add nagios check for sp.d4science.org tomcat
Status:
Closed
Priority:
High
Assignee:
_InfraScience Systems Engineer
Category:
Other
Target version:
Start date:
May 25, 2015
Due date:
May 29, 2015
% Done:
100%
Estimated time:
Infrastructure:
Production
Description
This machine hosts the Shibboleth service provider of the infrastructure.
The tomcat is the same and is installed in /usr/share/tomcat6/ ( ssh root@sp.d4science.org)
Updated by Massimiliano Assante almost 10 years ago
- Assignee changed from Andrea Dell'Amico to _InfraScience Systems Engineer
do we have the check?
Updated by Andrea Dell'Amico over 9 years ago
- Status changed from New to In Progress
- Target version changed from UnSprintable to Nagios monitoring
Updated by Andrea Dell'Amico over 9 years ago
- Status changed from In Progress to Feedback
- % Done changed from 0 to 100
I added the check.
The certificate expiration date is also checked.
Note that tomcat answers to the 8080 port without restrictions. It should be better to disable the http port altogether, I see that the ajp connector is used to talk with the apache web server. The ajp port is also open to the world, it should be limited to localhost only.
Last, some unused services are active: rpcbind, rpc.statd. They should be disabled.
Updated by Andrea Dell'Amico over 9 years ago
- Status changed from Feedback to Closed
Actions
