Changes between Version 2 and Version 3 of NSM2021/Agenda/IcingaEduroamCheck

Timestamp:

May 31, 2021, 11:53:20 AM (4 years ago)

Author:

admin

Comment:

--

NSM2021/Agenda/IcingaEduroamCheck

@@ -38 +38 @@
   }}}
 
+* On your !FreeRadius Server, add the monitoring IP as an client on `/etc/freeradius/clients.conf` or `/etc/freeradius/3.0/clients.conf` and restart the freeradius service.
 
-* Download monitoring plugin to icinga plugin directory ( we use a small script from REANNZ )
+  {{{
+       client monitor_icinga {
+            ipaddr  = a.b.c.d
+            secret  = <Shared_Secret>
+       }
+  }}}
+
+* Back on your Monitoring Server, 
+
+  Test user auth by `rad_eap_test -H <Freeradius_server_IP> -P 1812 -S <Shared_Secret>  -u <username@YOUR-DOMAIN> -p <user_pass> -m WPA-EAP -e PEAP`
+  [[br]]You should receive an `access-accept`
+
+* Next, download the monitoring plugin to icinga plugin directory ( we should use a script from REANNZ )
 
   {{{
@@ -49 +62 @@
   }}}
 
+
+== Director Configurations ==
+
+You have to, 
+
+  *  Create custom Plugin Check Command
+  *  Add required Arguments
+  *  Create custom fields set
+  *  Create custom fields
+  *  Create a Service Template
+  *  Create Host for the !FreeRadius Server
+  *  Create a Service and associate it with the created host
+   
+
+=== Create Custom Check Command ===
+
+* Goto `Director` --> `Commands` --> `+Add` and create the Command `eduroam-eap`
+
+[[Image(create-eduroam-eap.png, 600px, nolink)]]
+
+* Goto `Arguments` tab of the `eduroam-eap` command and add following Arguments. ( Args marked in red arrows have to be created with special care )
+
+[[Image(Args-eduroam-eap.png, 600px, nolink)]]
+
+  Arguments marked in red have to be created as follows:
+
+[[Image(Args-eduroam-eap-c.png, 600px, nolink)]]
+
+* Command Preview should be similar to:
+
+{{{
+object CheckCommand "eduroam-eap" {
+    import "plugin-check-command"
+    command = [ PluginDir + "/check_eduroam_login.pl" ]
+    arguments += {
+        "-2" = "MSCHAPV2"
+        "-C" = {
+            set_if = "$eduroam_request_cui$"
+        }
+        "-H" = "$address$"
+        "-I" = {
+            description = "NAS IP address"
+            set_if = {{
+                return len(macro("$eduroam_nas_ip_address$")) >0
+            }}
+            value = "$eduroam_nas_ip_address$"
+        }
+        "-O" = {
+            description = "Eduroam Operator Name"
+            set_if = {{
+                return len(macro("$eduroam_operator_name$")) >0
+            }}
+            value = "$eduroam_operator_name$"
+        }
+        "-P" = "$eduroam_port$"
+        "-d" = {
+            set_if = {{
+                return macro("$eduroam_verbosity$") == 2
+            }}
+        }
+        "-e" = "PEAP"
+        "-m" = "WPA-EAP"
+        "-p" = "$eduroam_password$"
+        "-s" = "$eduroam_secret$"
+        "-u" = "$eduroam_user$"
+        "-v" = {
+            set_if = {{
+                return macro("$eduroam_verbosity$") == 1
+            }}
+        }
+    }
+}
+
+
+}}}
+
+
+
+
+
+