Radius Service
Overviewβ
The Remote Authentication Dial-In User Service (RADIUS) is a networking protocol that allows centralized authentification.
The Centreon Monitoring Connector Radius Service aims to collect the status and response time of a RADIUS server login.
Pack assetsβ
Monitored objectsβ
- RADIUS server
Collected metrics & statusβ
- Radius-Login
Metric name | Description | Unit |
---|---|---|
status | Login status | |
radius.response.time.seconds | Login response time | seconds |
Prerequisitesβ
For this Monitoring Connector you will need :
- A RADIUS server
- An username and password used for authentication
- The RADIUS server secret
Setupβ
- Online License
- Offline License
- Install the Centreon package on every Centreon poller expected to monitor RADIUS ressources:
yum install centreon-plugin-Applications-Protocol-Radius
- On the Centreon Web interface, install the Radius Service Centreon Monitoring Connector on the Configuration > Monitoring Connectors Manager page
- Install the Centreon package on every Centreon poller expected to monitor RADIUS ressources:
yum install centreon-plugin-Applications-Protocol-Radius
- Install the Radius Service Centreon Monitoring Connector RPM on the Centreon Central server:
yum install centreon-pack-applications-protocol-radius
- On the Centreon Web interface, install the Radius Service Centreon Monitoring Connector on the Configuration > Monitoring Connectors Manager page
Configurationβ
Hostβ
- Log into Centreon and add a new Host through "Configuration > Hosts".
- Fill the "Name", "Alias" & "IP Address / DNS" fields according to your RADIUS Server settings
- Select the Applications-Protocol-Radius-custom template to apply to the Host
- Once the template applied, some Macros marked as 'Mandatory' hereafter have to be configured.
Mandatory | Name | Description |
---|---|---|
X | RADIUSUSERNAME | RADIUS server username |
X | RADIUSPASSWORD | RADIUS server password |
X | RADIUSADDR | RADIUS server address |
X | RADIUSSECRET | RADIUS server shared secret |
EXTRAOPTIONS | Any extra option you may want to add to every command_line (eg. a --verbose flag) |
How to check in the CLI that the configuration is OK and what are the main options for ?β
Once the plugin installed, log into your Centreon Poller CLI using the centreon-engine user account and test the Plugin by running the following command:
/usr/lib/centreon/plugins//centreon_protocol_radius.pl \
--plugin=apps::protocols::radius::plugin \
--mode=login \
--hostname= \
--secret='' \
--username='' \
--password='' \
--warning-status='' \
--critical-status='%{status} ne "accepted"' \
--warning-time='2' \
--critical-time='3' \
--use-new-perfdata
Expected command output is shown below:
OK : Radius Access Request Status: accepted | 'radius.response.time.seconds'=1s;0:2;0:3;;
This command would trigger a WARNING alarm if the login response time is
reported as over 2 seconds (--warning-time='2'
) and a CRITICAL alarm
over 3 seconds (--critical-time='3'
) or if the login status if different
than "accepted".
All available options for a given mode can be displayed by adding the
--help
parameter to the command:
/usr/lib/centreon/plugins//centreon_protocol_radius.pl \
--plugin=apps::protocols::radius::plugin \
--mode=login \
--help
All available options for a given mode can be displayed by adding the
--list-mode
parameter to the command:
/usr/lib/centreon/plugins//centreon_protocol_radius.pl \
--plugin=apps::protocols::radius::plugin \
--list-mode
Troubleshootingβ
UNKNOWN: Login endpoint returns error code 'Auth_TIMEOUT'
β
If you get this message, you're probably facing one of theses issues:
- Your RADIUS server isn't started
- An external device is blocking your request (firewall, ...)
UNKNOWN: Login endpoint returns error code 'Bad Response from server'
β
This error means the secret used to authenticate the RADIUS server is wrong.