|
You appear to be downgrading to a previous version. Database changes made for the newer version will not be reversed and <i>could</i> cause issues.
|
您似乎正在降级到以前的版本.为较新版本所做的数据库更改不会被撤消,并<i>可能</i>导致问题.
|
|
Central Database Connection Information
|
中央数据库连接信息
|
|
Once the variables are all set in the config.php file, you must also grant the $rdatabase_username access to the main Cacti database server. Follow the same procedure you would with any other Cacti install. You may then press the 'Test Connection' button. If the test is successful you will be able to proceed and complete the install.
|
一旦变量全部在config.php 文件中设置,您还必须授予$ rdatabase_username访问主Cacti 数据库服务器的权限.按照与任何其他Cacti 安装相同的步骤进行操作.然后,您可以按 '测试连接' 按钮.如果测试成功,您将能够继续并完成安装.
|
|
It is essential that the Central Cacti server can communicate via MySQL to each remote Cacti database server. Once the install is complete, you must edit the Remote Data Collector and ensure the settings are correct. You can verify using the 'Test Connection' when editing the Remote Data Collector.
|
中央Cacti 服务器必须能够通过MySQL 与每个远程Cacti 数据库服务器进行通信.安装完成后,您必须编辑远程数据采集器并确保设置正确.编辑远程数据采集器时,可以使用 '测试连接' 进行验证.
|
|
If SELinux is enabled on your server, you can either permanently disable this, or temporarily disable it and then add the appropriate permissions using the SELinux command-line tools.
|
如果您的服务器上开启了SELinux, 您可以永久禁用它,或临时关闭它,然后使用SELinux 命令行工具添加适当的权限.
|
|
Once installation has completed the CSRF path, should be set to read-only.
|
安装完成后,CSRF路径应设置为只读。
|
|
Input Validation Whitelist Protection
|
输入验证白名单保护
|
|
Cacti Data Input methods that call a script can be exploited in ways that a non-administrator can perform damage to either files owned by the poller account, and in cases where someone runs the Cacti poller as root, can compromise the operating system allowing attackers to exploit your infrastructure.
|
可以以某种方式利用调用脚本的Cacti数据输入法,即非管理员可以破坏轮询器帐户拥有的任何文件,并且在有人以root身份运行Cacti轮询器的情况下,可以破坏操作系统,从而使攻击者能够利用您的基础架构。
|
|
Therefore, several versions ago, Cacti was enhanced to provide Whitelist capabilities on the these types of Data Input Methods. Though this does secure Cacti more thoroughly, it does increase the amount of work required by the Cacti administrator to import and manage Templates and Packages.
|
因此,在多个版本之前,对Cacti进行了增强,以针对这些类型的数据输入法提供白名单功能。尽管这样做确实可以更彻底地保护Cacti,但是它确实增加了Cacti管理员导入和管理模板和软件包所需的工作量。
|
|
The way that the Whitelisting works is that when you first import a Data Input Method, or you re-import a Data Input Method, and the script and or arguments change in any way, the Data Input Method, and all the corresponding Data Sources will be immediatly disabled until the administrator validates that the Data Input Method is valid.
|
白名单的工作方式是,当您首次导入数据输入法或重新导入数据输入法,并且脚本和/或参数以任何方式更改时,数据输入法以及所有相应的数据源都会立即禁用,直到管理员确认数据输入法有效。
|
|
To make identifying Data Input Methods in this state, we have provided a validation script in Cacti's CLI directory that can be run with the following options:
|
为了在这种状态下识别数据输入法,我们在Cacti的CLI目录中提供了一个验证脚本,该脚本可以使用以下选项运行:
|
|
This script option will search for any Data Input Methods that are currently banned and provide details as to why.
|
该脚本选项将搜索当前禁止的任何数据输入方法,并提供有关原因的详细信息。
|
|
This script option un-ban the Data Input Methods that are currently banned.
|
此脚本选项取消禁止当前禁止的数据输入法。
|
|
This script option will re-enable any disabled Data Sources.
|
此脚本选项将重新启用所有禁用的数据源。
|
|
It is strongly suggested that you update your config.php to enable this feature by uncommenting the <b>$input_whitelist</b> variable and then running the three CLI script options above after the web based install has completed.
|
强烈建议您通过取消注释<b>$ input_whitelist</b>变量并在基于Web的安装完成后运行上面的三个CLI脚本选项来更新config.php以启用此功能。
|
|
Check the Checkbox below to acknowledge that you have read and understand this security concern
|
选中下面的复选框以确认您已阅读并了解此安全问题
|
|
I have read this statement
|
我已阅读此声明
|
|
Please select the default Data Source Profile to be used for polling sources. This is the maximum amount of time between scanning devices for information so the lower the polling interval, the more work is placed on the Cacti Server host. Also, select the intended, or configured Cron interval that you wish to use for Data Collection.
|
请选择用于采集器的默认数据源配置文件.这是扫描设备之间获取信息的最长时间,因此采集周期越短,Cacti 服务器上的工作就越多.此外,选择要用于数据采集的预期或配置的Cron 周期.
|
|
Cacti can automatically scan the network once installation has completed. This will utilise the network range below to work out the range of IPs that can be scanned. A predefined set of options are defined for scanning which include using both 'public' and 'private' communities.
|
安装完成后, Cacti 可以自动扫描网络.这将利用下面的网络范围来计算可扫描的IP 范围.为扫描定义了一组预定义的选项,包括使用 'public' 和 'private' 团体名.
|
|
If your devices require a different set of options to be used first, you may define them below and they will be utilized before the defaults
|
如果您的设备需要先使用一组不同的选项,您可以在下面定义它们,它们将在默认值之前使用
|