xymon Plugin

This plugin is currently being tested, so use it at your own risks.

This plugin will allow a Xymon server to periodically fetch special pages from a Dokuwiki installation to report information and warn about potential updates or security holes.

More information about Xymon can be found at http://xymon.sourceforge.net/.

The plugin will test the following things:

This test will check if a new version of Dokuwiki is available. The information is the same as the information reported at the top of the pages.

The colors are:

• Green: no new (non RC) release are available
• Yellow: a new (non RC) release is available
• Red: a security patch is available

• A DokuWiki installation
• A Xymon server
• Ruby on the Xymon server host (1.9 or newer prefered since 1.8 has some problems with openssl)

Install the plugin manually by copying the directory dokuwiki-plugin/xymon into lib/plugins.

host# ll lib/plugins/xymon/
total 4
-r--r-----  1 wwwdokuwiki  wwwdokuwiki  2453 Jan  4 11:58 action.php
-r--r-----  1 wwwdokuwiki  wwwdokuwiki   224 Jan  3 11:49 plugin.info.txt

The plugin will generate pages under the namespace xymon.

So you should:

• Create a user who can only access this namespace
• Forbid anyone else to see this namespace

Example:

The xymon script will fetch the pages using XMLRPC, so you must activate it and allow the corresponding user to use it.

Example:

Copy the xymon script to $XYMONHOME/ext. Check the file permissions and make sure it is executable.

In $XYMONHOME/etc/tasks.cfg, add:

[dokuwikicheck]
    ENVFILE /usr/local/www/xymon/server/etc/xymonserver.cfg
    NEEDS xymond
    GROUP nettests
    CMD /usr/local/www/xymon/server/ext/dokuwiki.rb
    INTERVAL 24h

In $XYMONHOME/etc/hosts.cfg:

0.0.0.0   wikiname:dokuwiki    #noconn NOCOLUMNS:info,trends dokuwikicheck DOKUWIKIURL:http://example.com/path/to/dokuwiki/ DOKUWIKIUSER:xymon  DOKUWIKIPASSWORD:password

If you need the xymon server to connect using a ssl client certificate, you can add the corresponding fields:

0.0.0.0   wikiname:dokuwiki    #noconn NOCOLUMNS:info,trends dokuwikicheck DOKUWIKIURL:https://example.com/path/to/dokuwiki/ DOKUWIKIUSER:xymon  DOKUWIKIPASSWORD:password DOKUWIKISSLCERT:/path/to/certs/client-cert-crt.pem DOKUWIKISSLKEY:/path/to/certs/client-cert-key.pem DOKUWIKISSLCACERT:/path/to/certs/server-ca-crtchain.pem   

Make sure that the certificate files are readable by the xymon server.

Also make sure that the server certificate chain is correct, because the script will refuse to connect if the webserver can't be authenticated. If you really don't want to verify the server's identity, you can edit the ruby script yourself to allow openssl to connect anyway (but you don't want to do this because you care about your security).

When the plugin and the script are installed, the status of the installation appears in the xymon interface:

It's time to update this installation:

To be written

• Support for ruby 18 (2012-01-04 16:20)
• Initial commit (2012-01-04 14:31)

See the bug tracker at GitHub: https://github.com/ZeWaren/dokuwiki-plugin-xymon/issues

• Ruby 1.8 does not have support for SNI. If your dokuwiki is accessible using HTTPS on a server using SNI, the certificate might not be validated and the script might not connect.

hostname was not match with the server certificate