pcp
[Top] [All Lists]

Re: [pcp] proc pmda question

To: Nathan Scott <nathans@xxxxxxxxxx>
Subject: Re: [pcp] proc pmda question
From: Chandana De Silva <chandana@xxxxxxxxxxxxx>
Date: Tue, 09 Jun 2015 12:12:53 +1000
Cc: pcp@xxxxxxxxxxx
Delivered-to: pcp@xxxxxxxxxxx
In-reply-to: <845583066.14046059.1433813114755.JavaMail.zimbra@xxxxxxxxxx>
References: <1433811890.23309.20.camel@xxxxxxxxxxxxx> <845583066.14046059.1433813114755.JavaMail.zimbra@xxxxxxxxxx>
Reply-to: chandana@xxxxxxxxxxxxx
Hello Nathan,
Thanks for your response. Unfortunately that did not work. I guess I will have to go down the SSL (or SASL) path. Pity that SASL can't use SSH pub key.

Regards
Chandana


On Mon, 2015-06-08 at 21:25 -0400, Nathan Scott wrote:
Hi Chandana,

----- Original Message -----
> I have a host running the proc pmda. My issue is that proc.psinfo data is not
> visible from outside the localhost, even if the access controls (see below)
> allow fetch.
> 
> [ chandana@xxxxxxxxxx ~]$ pminfo -f -h dd1.dev.mel.mmd proc.nprocs
> 
> proc.nprocs
>     value 98
> [ chandana@xxxxxxxxxx ~]$ pminfo -f -h dd1.dev.mel.mmd proc.psinfo.rss
> 
> proc.psinfo.rss
> Error: No permission to perform requested operation

Try "-h local:" - the proc PMDA needs an authenticated connection for many of
the metrics it exports (but not all, as we can see above).  By default, the
inet connection established via "-h hostname" does not provide that (it can,
if you setup SASL, SSL, etc).  The af_unix socket connection from "local:" or
"unix:" *does* provide authentication by default, so the above will work via
that connection style.

cheers.

--
Nathan
<Prev in Thread] Current Thread [Next in Thread>