Comments on: Nagios check_mailq: is not executable by uid 0

By: wayne

wayne — Wed, 25 Aug 2010 13:45:42 +0000

I found the problem. CentOS is using user nrpe and not nagios for nrpe daemon. After I add in nrpe in sudoer files everything works!
Thanks !!!!

By: wayne

wayne — Sun, 22 Aug 2010 11:59:58 +0000

Thanks for prompt reply Vitalie, I have other nrpe check (load, user, disk, process) running without problem, only this qmail check give me the unable to read output.

By: Vitalie Cherpec

Vitalie Cherpec — Sun, 22 Aug 2010 08:22:20 +0000

Check connection from nagios server to your server on nrpe port (5666):

[vitalie@nagios ~]$ telnet server 5666
Trying 1.1.1.1…
Connected to server (1.1.1.1).
Escape character is ‘^]’.

Examine iptables rules, /etc/xinetd.d/nrpe and /etc/hosts.* files, you may have IP address restrictions there, check log files in /var/log/*.

By: wayne

wayne — Sun, 22 Aug 2010 06:30:52 +0000

I got different error this time after adding in sudoer.
[root@nagios-server]# /usr/lib/nagios/plugins/check_nrpe -H 10.0.0.2 -c check_qmail_queue
NRPE: Unable to read output

I run the command in monitored server under nagios account with sudo and i have no issue.
sh-3.1$ /usr/bin/sudo /usr/lib/nagios/plugins/check_mailq -c 500 -w 250 -M qmail
OK: mailq (23) is below threshold (250/500)|unsent=23;250;500;0

Any thoughts?

By: Vitalie Cherpec

Vitalie Cherpec — Sat, 21 Aug 2010 07:33:49 +0000

You need to execute plugin under with sudo:

http://www.cherpec.com/2008/08/nagios-check_mailq-is-not-executable-by-uid-0/#comment-173

By: wayne

wayne — Fri, 20 Aug 2010 23:19:57 +0000

I have problem with nrpe. It runs locally fine from command line with proper output. With nrpe, it gives me “Couldn’t match /var/qmail/bin/qmail-qstat output” with UNKNOWN status. I don’t know what was wrong.

By: wayne

wayne — Fri, 20 Aug 2010 22:47:05 +0000

Thanks, it works for me. Just vi check_mailq and change green line according to the above instruction

By: Alex

Alex — Fri, 14 Aug 2009 07:29:59 +0000

Another example

In command.cfg (or whatever file you use for command definitions)
# ‘check_mailq’ command definition
# $USER1$ = /usr/local/nagios/libexec

define command{
command_name check_mailq
command_line /usr/local/bin/sudo $USER1$/check_mailq -w $ARG1$ -c $ARG2$ -M $ARG3$
}

In servers.cfg (or whatever file you use for service definitions)
define service{
use local-service
host_name
service_description MailQue
check_command check_mailq!200!300!qmail
}

In sudoers file
# User alias specification
User_Alias NAGIOS = nagios
# Cmnd alias specification
Cmnd_Alias NAGIOSCOMMANDS = /var/qmail/qmail-qstat, /usr/local/nagios/libexec/check_mailq
# Defaults specification
Defaults:NAGIOS !requiretty

# User privilege specification
root ALL=(ALL) ALL
NAGIOS ALL=(ALL) NOPASSWD: NAGIOSCOMMANDS

By: Vitalie Cherpec

Vitalie Cherpec — Fri, 17 Jul 2009 20:12:24 +0000

The instructions from article are for Qmail, check the /usr/lib/nagios/plugins/check_mailq file for Exim/Sendmail settings.

By: astro

astro — Fri, 17 Jul 2009 19:45:55 +0000

Can you help me?, I am using exim and I am getting “ERROR: is not executable by (uid 0:gid(0 10 6 4 3 2 1 0))” I have did all these steps, but it do not works