Hi list, Is it safe to edit /etc/libvirt/libvirtd.conf? I need to change auth_unix_rw="sasl" because I want to allow libvirt-snmp to acess to VM informations. Perhaps I need to create a user in sasl instead ? Thanks a lot ------------------------ COUSIN Kevin
Hi Kevin, you should not change auth_unix_rw=sasl. I never used libvirt-snmp but it is save to create another user like this:
saslpasswd2 -a libvirt <username>
I did that several times on my hosts. On Mon, Oct 19, 2015 at 4:43 PM, Kevin COUSIN <kevin@famillecousin.fr> wrote:
Hi list,
Is it safe to edit /etc/libvirt/libvirtd.conf? I need to change auth_unix_rw="sasl" because I want to allow libvirt-snmp to acess to VM informations. Perhaps I need to create a user in sasl instead ?
Thanks a lot
------------------------
COUSIN Kevin _______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
On Wed, Oct 21, 2015 at 05:48:17PM +0200, Roman Mohr wrote:
Hi Kevin,
you should not change auth_unix_rw=sasl. I never used libvirt-snmp but it is save to create another user like this:
saslpasswd2 -a libvirt <username>
I did that several times on my hosts.
On Mon, Oct 19, 2015 at 4:43 PM, Kevin COUSIN <kevin@famillecousin.fr> wrote:
Hi list,
Is it safe to edit /etc/libvirt/libvirtd.conf? I need to change auth_unix_rw="sasl" because I want to allow libvirt-snmp to acess to VM informations. Perhaps I need to create a user in sasl instead ?
Would you share your use case for libvirt-snmp? The supposed danger is that whatever uses snmp may modify VM state under the feet of oVirt and surprise it.
Hi Dan, I want to monitor my oVirt infrastructure with Zabbix. I found a zabbix template , but it needs to modifiy libirtd.conf to enable libvirt-snmp to access VM informations (https://github.com/jensdepuydt/zabbix-ovirt). ------------------------ Kevin ----- Mail original -----
De: "Dan Kenigsberg" <danken@redhat.com> À: "Roman Mohr" <rmohr@redhat.com> Cc: "Kevin COUSIN" <kevin@famillecousin.fr>, "users" <users@ovirt.org> Envoyé: Jeudi 22 Octobre 2015 09:39:49 Objet: Re: [ovirt-users] oVirt monitoring with libirt-snmp
On Wed, Oct 21, 2015 at 05:48:17PM +0200, Roman Mohr wrote:
Hi Kevin,
you should not change auth_unix_rw=sasl. I never used libvirt-snmp but it is save to create another user like this:
saslpasswd2 -a libvirt <username>
I did that several times on my hosts.
On Mon, Oct 19, 2015 at 4:43 PM, Kevin COUSIN <kevin@famillecousin.fr> wrote:
Hi list,
Is it safe to edit /etc/libvirt/libvirtd.conf? I need to change auth_unix_rw="sasl" because I want to allow libvirt-snmp to acess to VM informations. Perhaps I need to create a user in sasl instead ?
Would you share your use case for libvirt-snmp?
The supposed danger is that whatever uses snmp may modify VM state under the feet of oVirt and surprise it.
On Fri, Oct 23, 2015 at 01:31:10PM +0200, Kevin COUSIN wrote:
Hi Dan,
I want to monitor my oVirt infrastructure with Zabbix. I found a zabbix template , but it needs to modifiy libirtd.conf to enable libvirt-snmp to access VM informations (https://github.com/jensdepuydt/zabbix-ovirt).
If all you need is monitoring, libvirt-snmp should be happy to use a read-only connection to libvirt, which is kept open by default. If this is impossible, I suggest to file a bug on libvirt-snmp. If you trust libvirt-snmp and zabbix not modify VM state, you can replace "sasl" with "none", and restart libvirt, supervdsm and vdsm.
participants (3)
-
Dan Kenigsberg -
Kevin COUSIN -
Roman Mohr