Monitoring UNIX/Linux with Operations Manager 2007 R2

Barry
Shilmover
-

Senior Program
Manager

Rehan Jaddi
–

Group Program
Manager

System Center Cross Platform and
Interop

Team

Microsoft Corporation

Agenda

Cross Platform News

Architecture

Partner Extensions

Demos

Cross Platform News

Since we Released System Center Operations Manager 2007 R2:

Open Sourced our Providers
–

We have made
available our
UNIX/Linux
providers as open source on
www.codeplex.com
to allow customers and
partners to extend our platform support

Novell
SUSE Enterprise Linux 11 (SLES 11) support
–

As part of an update
we
released
October 15
th

we added support for Novell’s latest Linux release.

Solaris
Zones support
–

As part of an
that same update
released October
15
th

we added support for Solaris virtual environments.

Today:

Beta
of Audit Collection Services (ACS)

–

We have made available a
beta of
ACS
to
support
UNIX/Linux
platforms

Coming Soon:

Contribution
to
OpenPegasus

–

We have submitted our improvements to
the Open Group to contribute
our work back to
the
OpenPegasus

project.
Open Group targeting end of
year for
OpenPegaus

2.10.

OpsMgr

X
-
Plat Architecture

Module Details

SSH

Daemon

Health

Service

WS
-
Man

Modules

SSH

Modules

SFTP

Modules

Enumerate

Get

Invoke

Execute Cmd

Session

Transfer File

CIMOM


OpenPegasus 2.9

with

WS
-
Management

Support

OpsMgr

Providers

OS

Resources

WinRM

Putty Library

New component for Cross Platform

Existing v3 or SP1 component

Outside dependency

Built
-
in UNIX/Linux functionality

WS
-
Man

CIMOM

OpsMgr

Providers

OpsMgr

WS
-
Man

OS

Resources

UNIX/Linux Component Overview

WSMan

binaries

CIMOM

binaries

RPM/depot/pkg

Installer

Provider

libraries

CIMOM

daemon

OpenPegasus

OS

Provider

CPU

Provider

Disk

Provider

Memory

Provider

Process

Provider

Network

Provider

Syslog

Provider

Logfile

Provider

Script

Provider

Ext API

Provider

File trans

Provider

New component for Cross Platform

Existing v3 or SP1 component

Outside dependency

Built
-
in UNIX/Linux functionality

WS
-
Man

CIMOM

OpsMgr

Providers

OpsMgr

WS
-
Man

OS

Resources

Ops Mgr Component Overview

Modules

DLL

UI

Extension

Assemblies

Integrated

Installer

Management

Packs

OpsMgr

Srv/UI

Health

Service

WS
-
Man

Modules

SSH

Modules

SFTP

Modules

WinRM

API

New component for Cross Platform

Existing v3 or SP1 component

Outside dependency

Built
-
in UNIX/Linux functionality

WS
-
Man

CIMOM

OpsMgr

Providers

OpsMgr

WS
-
Man

OS

Resources

17 Supported Platforms

AIX

Version 5.3 (Power)

Version 6.1 (Power)

HP
-
UX

Version 11iv2 (PA
-
RISC/IA64)

Version 11iv3 (PA
-
RISC/IA64)

Solaris

Version 8 (SPARC)

Version 9 (SPARC)

Version 10 (SPARC/x86)

19

Red Hat Enterprise Linux

Version 4 (x86/x64)

Version 5 (x86/x64)

SUSE Linux Enterprise Server

Version 9 (x86)

Version 10 SP1 (x86/x64)

Version 11 (x86/x64
)

Management Pack Hierarchy

Library

Management Pack

Microsoft.Unix.Library

Microsoft.Linux.Library

Microsoft.Linux.SUSE.Library

Microsoft.Linux.SLES.10

•

Unix Object Definitions

•

Data Sources (
WSMan
/SSH/SFTP)

•

Probe Actions (
WSMan
/SSH/SFTP)

•

Write Actions (
WSMan
/SSH/SFTP)

•

Generic Monitors

•

Generic Tasks

•

Linux Object Definitions

•

SUSE Linux Object Definitions

•

SLES 10 Object Definitions

•

Monitors

•

Rules

•

Diagnostics/Recoveries

•

Reports

Management Pack

Generic Libraries (Imported Automatically)


Name

Description

Microsoft.Unix.Library

Defines all objects, DS,

WA, PA for Unix
-
type systems

Microsoft.Unix.Views

Defines

all generic views used with Cross Platform

Microsoft.Unix.LogFile.Library

Used

by UNIX/Linux
LogFile

Management Pack
Template

Microsoft.Unix.Service.Library

Used

by UNIX/Linux Service Management Pack
Template

Management Pack
-

Continued

OS Type Libraries

Name

Description

Microsoft.AIX.Library.mp

Generic AIX Operating System Library

Microsoft.HPUX.Library.mp

Generic HP
-
UX Operating System Library

Microsoft.Linux.Library.mp

Generic Linux

Operating System Library


Microsoft.Linux.RedHat.Library.mp

Generic Red Hat Operating System Library


Microsoft.Linux.SUSE.Library.mp

Generic SUSE Linux Operating System Library


Microsoft.Solaris.Library.mp

Generic Solaris Operating System Library

Management
Pack
-

Continued

Base OS Management Packs

Name

Description

Microsoft.AIX.5.3.mp

AIX 5.3 Base OS MP

Microsoft.AIX.6.1.mp

AIX 6.1 Base OS MP

Microsoft.HPUX.11iv2.mp

HP
-
UX

11iv2 (11.23)

Base OS MP

Microsoft.HPUX.11iv3.mp

HP
-
UX 11iv3 (11.31) Base OS MP

Microsoft.Linux.RHEL.4.mp

Red

Hat Enterprise Linux 4

Base OS MP

Microsoft.Linux.RHEL.5.mp

Red Hat Enterprise Linux 5 Base OS MP

Microsoft.Linux.SLES.9.mp

SUSE

Linux Enterprise Server 9

Base OS MP

Microsoft.Linux.SLES.10.mp

SUSE

Linux Enterprise Server 10

Base OS MP

Microsoft.Linux.SLES.11.mp

SUSE

Linux Enterprise Server 11

Base OS MP

Microsoft.Solaris.8.mp

Solaris 8 Base OS MP

Microsoft.Solaris.9.mp

Solaris

9

Base OS MP

Microsoft.Solaris.10.mp

Solaris 10 Base OS MP

Cross Platform Audit Collection Services

Overview

Provide Audit Collection Services (ACS) for Unix and Linux systems

•
Leverage
OpsMgr

2007 R2 Cross Platform infrastructure to enable UNIX/Linux auditing

•
Collect and aggregate audit events across enterprise systems for a singular view

•
Out of the box support for base OS audit events

Reporting
–

base OS auditing reports

•
Access violations

•
Account management

•
Administrator activity

Provide the infrastructure to enable enterprise auditing

•
Network devices

•
Applications

Delivery

•
Out of band, dependent on
OpsMgr

2007 R2

•
Private Beta
–

November 9, 2009

•
RTM
-

CY Q1 2010

Cross Platform ACS Details

•
Access violations
–

unsuccessful logon attempts

•
Account management

•
Account creation/deletion/password change

•
Administrator activity
–

su
,
sudo

•
Forensic
–

all events for a computer/event ID

•
User logons



Reports

•
Out of the box MP for each platform

•
Datasources

-

Syslog
,
su

log, audit, etc.

•
Audit event collection:

•
Logons
–

success/failure

•
Ssh
,
rsh
,
tty
, ftp

•
Privilege use activity
–

su
,
sudo

•
Account activity
–

create/delete/password change


Management
Packs

•
RedHat

Enterprise 4, 5
(Beta)

•
Novell SLES 9, 10, 11 (Beta)

•
Solaris 8, 9, 10 (RTM)

•
HPUX 11iv2, 11iv3 (RTM)

•
AIX 5.3, 6.1 (RTM)


Platforms

How it all works

Syslog

SCX Agent
Logfile

Provider

SCX
Logfile

Datasource

Module

Management Pack
Workflow







A.
Collect syslog
audit events


B.
Parse syslog
events &
write to SEL

Windows Security
Event Log

ACS
Database

SCX Parsing &
SEL Write
Action Module

OpsMgr Server

UNIX/Linux Server

Supported Scenarios

SU:

Fail

Success


SUDO :

Fail

Success


Login
-

SSH, SFTP, SCP, Console
(TTY):

Fail

Success


User/Group Actions:

User Add

User Remove

Group Add

Group Remove

User added to Group

User Removed from Group

Password Change

UNIX/Linux Reports Included

Access
Violation
-

Unsuccessful Logon
Attempts

Account Management

Privileged Logon

Administrator Activity

Forensic
-

All Events for Specified
User

Forensic
-

All Events for Specified Event
Id

Forensic
-

All Events for Specified
Computer

Partner Extensions

BridgeWays


Currently Available
:

Apache

MySQL

Oracle Database

VMware

JBoss

Tomcat


Releasing 11/18
:


IBM DB2

BES (v4 support only right now
-

changes coming that I will update you on
soon) JMX Template (only extends
JBoss

MP right now) Oracle Database ASM


Beta for 11/18
:

IBM
WebSphere

Oracle
WebLogic



Early 2010
:

Oracle Database RAC

JMX Template

BridgeWays

-

Roadmap

Databas
e

Servers

Applicatio
n

Servers

Virtualizati
on

Web

Server
s

Communicatio
n

Servers

Novell

Linux Roles Management Packs:

•
BIND/DNS

•
DHCP Server

•
SAMBA

•
NFS server

•
LDAP server (
OpenLDAP
)

•
Print server (CUPS)

•
Firewall (SuSEfirewall2)



Demos

Discovery Wizard

Management Pack Templates

Monitoring Heterogeneous Applications

Cross Platform Audit Collection Services

Discovery Wizard
–

Phase 1

IP
Address

DNS
Name

IP Range

Agent
Installed?

Support
ed
Version
?







Signed?



Sign
Cert









Discovery Wizard
–

Phase 2

Agent
Installed?

Insert in
DB

Agent
Supported?

Deploy
Package

Install/Upgrade
Package

Sign
Cert/Validat
e
Installation























More info

:Cross Platform Providers

http://xplatproviders.codeplex.com
/


Cross Platform Update:

http
://
www.microsoft.com/downloads/details.aspx
?displaylang=en&FamilyID=4a41a8be
-
0a37
-
4bd2
-
b5b1
-
026468b317fb


Complete an evaluation
on
CommNet

and enter to
win an Xbox 360 Elite!

©
2008 Microsoft
Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademar
ks
and/or trademarks in the U.S. and/or other countries.

The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the
dat
e of this presentation. Because Microsoft must respond to changing market conditions, it should
not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any informatio
n p
rovided after the date of this presentation.
MICROSOFT
MAKES NO WARRANTIES, EXPRESS,
IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.