在linux上创建PA 操作手册.doc

Netcool/Omnibus PA配置手册-Linux(部分)文档修改历史Netcool/Omnibus PA配置手册-Linux(部分)1. PA介绍PA 全称Process Agent，是Netcool/Omnibus中非常重要的一个服务控制和管理组件。其最主要的作用是1. 可以对Netcool/Omnibus的各个组件的主动自动的远程和本地监控管理，PA可以监控每个组件的运行状态，当其管理的组件被人工或者因故障停止运行时，在无人值守的情况下，PA可以将其自动start，保证服务的可以持续性、稳定性的运行。2. 第二个重要的作用是用来控制Objectserver中的每个automation的运行，每个automation的运行都将依赖于PA。2. PA配置的前提准备在配置PA前，需要先初始化好master objectser，并定义好objectserver和pa运行的主机以及服务端口号，该过程可由图形化的$OMNIHOME/bin/nco_xigen来配置，也可以通过手工修改$NCHOME/etc/ omni.dat来实现，建议使用图形化来配置，避免出现错误。需要准备一些相关的基础知识，需要明白PA的工作机制，以及配置pa时使用的PAM认证模块（Pluggable Authentication Modules）3. PA配置步骤基于linux的PA配置过程和步骤如下所示：1. 在系统中创建ncoadmin用户组groupadd ncoadmin2. 将root用户加入到ncoadmin组中usermod -G ncoadmin root3. 设置netcool环境变量，将如下的环境变量加入到/etc/profile或者root的profile中export NCHOME=/opt/netcoolexport OMNIHOME=$NCHOME/omnibusexport PATH=$PATH:$NCHOME/bin:$OMNIHOME/bin:$OMNIHOME/probesexport LANG=zh_CN /(为了确保中文事件的正常显示)export LC_ALL=zh_CN/ (为了确保中文事件的正常显示) 4.安装netcool的PAM认证模块cp /etc/pam.d/passwd /etc/pam.d/netcool 其内容如下：#%PAM-1.0auth includesystem-authaccount includesystem-authpassword includesystem-auth4. 安装objeserver pam认证模块运行脚本：$OMNIHOME/bin/nco_install_ospam 产生objectserver的 pam文件：/etc/pam.d/nco_objservnco_objserv文件内容如下：# PAM Configuration for the Netcool/OMNIbus ObjectServer.auth required/opt/netcool/omnibus/platform/linux2x86/module/pam/omnibus_os/libpam_omnibus_os.so.1account required/opt/netcool/omnibus/platform/linux2x86/module/pam/omnibus_os/libpam_omnibus_os.so.1password required/opt/netcool/omnibus/platform/linux2x86/module/pam/omnibus_os/libpam_omnibus_os.so.15. 修改pa的配置文件$OMNIHOME/etc/nco_pa.conf, 创建各个组件的进程和服务以及process control的路由,具体内容如下所示：nco_process SENSEMS /企业ObjectServer启动的进程名字Command $OMNIHOME/bin/nco_objserv -name SENSEMS -pa SENSE_PA run as 0Host=sense1Managed=TrueRestartMsg=$NAME running as $EUID has been restored on $HOST.AlertMsg=$NAME running as $EUID has died on $HOST.RetryCount=0ProcessType=PaPA_AWAREnco_process syslog_probeCommand $OMNIHOME/probes/nco_p_syslog -server SENSEMS run as 0Host=sense1Managed=TrueRestartMsg=$NAME running as $EUID has been restored on $HOST.AlertMsg=$NAME running as $EUID has died on $HOST.RetryCount=0ProcessType=PaPA_AWARE# List of Services# NOTE:To ensure that the service is started automatically, change the# ServiceStart attribute to Auto.#nco_service Core#ServiceType=Master#ServiceStart=Non-Auto#process MasterObjectServer NONE#nco_service sensemsServiceType=MasterServiceStart=Auto /保证该进程/服务由pa自动控制process SENSEMS NONE接下页。nco_service syslogprobeServiceType=MasterServiceStart=Auto /保证该进程/服务由pa自动控制process syslog_probe NONE# This service should be used to store processs that you want to temporarily# disable. Do not change the ServiceType or ServiceStart settings of this# process.#nco_service InactiveProcessesServiceType=Non-MasterServiceStart=Non-Auto# ROUTING TABLE# user - (optional) only required for secure mode PAD on target host# user must be member of UNIX group ncoadmin# password - (optional) only required for secure mode PAD on target host# use nco_pa_crypt to encrypt.nco_routinghost sense1 SENSE_PA #写入pa server的名字和主机名字，可以不写用户名和密码（如果使用安全参数-secure来启动pa server和各个组件的话，比如在此写入用户名和加密过的密码6. 使用omnibus加密工具加密root用户登录操作系统的密码$OMNIHOME/bin/nco_pa_crypt sense获得加密密码：EHEDBDBGAP7. 修改objectserver的配置文件：$OMNIHOME/etc/SENSEMS.props修改字段如下：PA.Username:rootPA.Password: EHEDBDBGAP #root密码sense加密过为：EHEDBDBGAP8. 修改syslog probe的配置文件(这里只简单介绍syslog probe，其他组件雷同),syslog probe的配置文件位于：$OMNIHOME/probe/linux2x86/ps# Add your settings here#Server : SENSEMS9. 检查objectserver的pam文件，$OMNIHOME/etc/pam_omnibus_os.conf里面确保ObjectServer正确# Available module options and there default values.# Server : NCOMS# Debug : False# LogToStderr : False#Server : SENSEMS10. 停止所有的omnibus组件11. 使用pa启动omnibus组件$OMNIHOME/bin/nco_pad name SENSE_PA user root password EHEDBDBGAP authenticate PAM/上面的命令是启动PA，-name参数后面指定的是PA，-user 参数是指定当前登录操作系统的用户（root）,-password 参数指定的是登录操作系统用户的密码密码,-authenticate 参数指定的是PA使用的认证方式，这里采用的PAM（插件认证模块）命令回车后输出的结果：Netcool/OMNIbus Process Agent Daemon - Version 7.2.1 Netcool/OMNIbus PA API Library Version 7.2.1 Sybase Server-Library Release: 15.0Server Settings : Name of server : SENSE_PA Path of used log file : /opt/netcool/omnibus/log/SENSE_PA.log Configuration File : /opt/netcool/omnibus/etc/nco_pa.conf Child Output File : /dev/null Maximum logfile size : 1024 Thread stack size : 69632 Message Pool size : 45568 PID Message Pool size : 50 Rogue Process Timeout : 30 Truncate Log : False Instantiate server to daemon : True Internal API Checking : False No Configuration File : False Start Auto-start services : True Authentication System : Pluggable Authentication Modules Trace Net library : False Trace message queues : False Trace event queues : False Trace TDS packets : False Trace mutex locks : False Host DNS name : PID file (from $OMNIHOME) : ./var/SENSE_PA.pid Kill Process group : False Secure Mode : False User : root Administration Group Name. : ncoadminForking to a Daemon Process.启动成功与否，可以检查PA日志/opt/netcool/omnibus/log/SENSE_PA.log12. 检查所有的omnibus组件是否已经启动，使用ps命令检查rootsense1 # ps -ef|grep ncoroot 13805 1 0 09:27 ? 00:00:00 /opt/netcool/omnibus/platform/linux2x86/bin/nco_pad -name SENSE_PA -user root -authenticate PAMroot 13837 13805 1 09:28 ? 00:00:00 /opt/netcool/omnibus/platform/linux2x86/bin/nco_objserv -name SENSEMS -pa SENSE_PAroot 13838 13805 0 09:28 ? 00:00:00 /opt/netcool/omnibus/probes/linux2x86/nco_p_syslog -server SENSEMS13.使用nco_pa_status命令检查启动结果，使用该命令检查pa组件的运行状态，使用的密码是明码$OMNIHOME/bin/nco_pa_status server SENSE_PA user root password sense输出结果：-Service Name Process Name Hostname User Status PID-sensems SENSEMS sense1 root RUNNING 13837syslogprobe syslog_probe sense1 root RUNNING 13838-13. 检查每个组件是否由PA自动管理，也就是说当其中一个组件stop后，PA会监控器管理组件的状态并将其启动。从上图中可以看出syslog probe的进程号是13838，我们现在就拿syslog probe做实验，将其stop或者kill掉，再看其状态$OMNIHOME/bin/nco_pa_status server SENSE_PA user root password sense输出结果：-Service Name Process Name Hostname User Status PID-sensems SENSEMS sense1 root RUNNING 13837syslogprobe syslog_probe sense1 root RUNNING 13838-rootsense1 # kill -9 13838rootsense1 # nco_pa_status -server SENSE_PA -user root -password sense-Service Name Process Name Hostname User Status PID-sensems