pcp
[Top] [All Lists]

Re: [pcp] proc pmda access control changes

To: Nathan Scott <nathans@xxxxxxxxxx>
Subject: Re: [pcp] proc pmda access control changes
From: Martins Innus <minnus@xxxxxxxxxxx>
Date: Thu, 07 Nov 2013 09:06:11 -0500
Cc: PCP <pcp@xxxxxxxxxxx>
Delivered-to: pcp@xxxxxxxxxxx
In-reply-to: <1325977274.21786318.1383783119746.JavaMail.root@xxxxxxxxxx>
References: <51EFBB29.1000807@xxxxxxxxxxxxxxxx> <1461308559.1266316.1374665942271.JavaMail.root@xxxxxxxxxx> <51F035B7.6040409@xxxxxxxxxxxxxxxx> <527A6701.1030609@xxxxxxxxxxx> <1325977274.21786318.1383783119746.JavaMail.root@xxxxxxxxxx>
User-agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.1.0
Nathan,
    Great, thanks.

Martins


On 11/6/2013 7:11 PM, Nathan Scott wrote:
Hi Martins,

----- Original Message -----
Hello,

      Sorry to bring up an old thread, but we just ran into this issue
when upgrading from 3.8.0 to 3.8.6.  We have an isolated cluster that we
are not worried about restricting access to proc metrics.  We currently
do remote logging that includes the proc pmda.  Was a backdoor way of
doing this implemented?  If not, what is the suggested configuration to
make collecting all proc metrics work again from a remote host?
No backdoor was added, but I think for secure/test environments like your
case we perhaps should not make this quite so difficult.  I've added in a
(-A, non-default) pmdaproc option to allow the checking to be switched off.

The alternative is a SASL2 setup for remote authentication, details here:
http://oss.sgi.com/projects/pcp/pcp-gui.git/man/html/lab.auth.html

cheers.

--
Nathan



<Prev in Thread] Current Thread [Next in Thread>