Task #150
closed
  
Add nagios check for sp.d4science.org tomcat
 
        
        Added by Massimiliano Assante over 10 years ago.
        Updated almost 10 years ago.
        
Assignee:
_InfraScience Systems Engineer
 
Infrastructure:
Production
 
 
  
  
  
  Description
  
  This machine hosts the Shibboleth service provider of the infrastructure.
The tomcat is the same and is installed in /usr/share/tomcat6/ ( ssh root@sp.d4science.org)
   
 
 
  
  
    
    
    
    
       - Assignee changed from Andrea Dell'Amico to _InfraScience Systems Engineer
 
    
    
     
   
  
  
    
    
    
    
       - Status changed from New to In Progress
 
       - Target version changed from UnSprintable to Nagios monitoring
 
    
    
     
   
  
  
    
    
    
    
       - Status changed from In Progress to Feedback
 
       - % Done changed from 0 to 100
 
    
    I added the check.
The certificate expiration date is also checked.
Note that tomcat answers to the 8080 port without restrictions. It should be better to disable the http port altogether, I see that the ajp connector is used to talk with the apache web server. The ajp port is also open to the world, it should be limited to localhost only.
Last, some unused services are active: rpcbind, rpc.statd. They should be disabled.
 
     
   
  
  
    
    
    
    
       - Status changed from Feedback to Closed
 
    
    
     
   
  
 
  
  
 
Also available in:  Atom
  PDF