Task #150
closed
Add nagios check for sp.d4science.org tomcat
Added by Massimiliano Assante almost 10 years ago.
Updated over 9 years ago.
Assignee:
_InfraScience Systems Engineer
Infrastructure:
Production
Description
This machine hosts the Shibboleth service provider of the infrastructure.
The tomcat is the same and is installed in /usr/share/tomcat6/ ( ssh root@sp.d4science.org)
- Assignee changed from Andrea Dell'Amico to _InfraScience Systems Engineer
- Status changed from New to In Progress
- Target version changed from UnSprintable to Nagios monitoring
- Status changed from In Progress to Feedback
- % Done changed from 0 to 100
I added the check.
The certificate expiration date is also checked.
Note that tomcat answers to the 8080 port without restrictions. It should be better to disable the http port altogether, I see that the ajp connector is used to talk with the apache web server. The ajp port is also open to the world, it should be limited to localhost only.
Last, some unused services are active: rpcbind, rpc.statd. They should be disabled.
- Status changed from Feedback to Closed
Also available in: Atom
PDF