Administrator and Acknowledgment

Post by **srrhd** » Wed Apr 11, 2012 2:31 am

Hi,

It appears that users with Admin authorization level can't acknowledge a problem. Only the default user 'nagiosadmin' can.

Looking into the users profile i found nothing to allow this action. Is this a bug, or a permission problem on our server ?

Regards,

Aurelien.

scottwilkerson · Post by **scottwilkerson** » Wed Apr 11, 2012 8:32 am

Has this Admin account ever logged in to the XI interface, or have you just masqueraded as the user?

The reason I ask is that the user is added to the htpasswd file that Nagios Core uses the first time they login to XI. If this hasn't been done, they may not have the authorization to submit the command.

Post by **srrhd** » Mon Apr 16, 2012 9:12 am

Yes it had. In fact, i tryed to acknowledge from the XI Interface.

As you pointed the utilization of htpasswd, i gave a look at it and if /usr/local/nagiosxi/etc/htpasswd.users contains all the users, /usr/local/nagios/etc/htpasswd.users contains only "nagiosadmin". I tryied to implement all the users into the nagios' htpasswd but the problem persist. Here is the error message:

192.168.80.188 - 2012-04-16 - 18h-05m-00s.png

mguthrie · Post by **mguthrie** » Mon Apr 16, 2012 9:24 am

The admin level permissions need to write to the /usr/local/nagios/etc/cgi.cfg file. Can you post either the cgi.cfg file or the config directives that this admin user is authorized for in that file?

scottwilkerson · Post by **scottwilkerson** » Mon Apr 16, 2012 6:29 pm

I believe this was solved via email by restarting apache.

Post by **srrhd** » Mon Apr 16, 2012 11:51 pm

Mike, here is the cgi.cfg:

Code: Select all

[root@NagiosXI]# cat /usr/local/nagios/etc/cgi.cfg
# MODIFIED
default_statusmap_layout=6


# UNMODIFIED
action_url_target=_blank
authorized_for_all_host_commands=nagiosadmin
authorized_for_all_hosts=nagiosadmin
authorized_for_all_service_commands=nagiosadmin
authorized_for_all_services=nagiosadmin
authorized_for_configuration_information=nagiosadmin
authorized_for_system_commands=nagiosadmin
authorized_for_system_information=nagiosadmin
default_statuswrl_layout=4
escape_html_tags=1
lock_author_names=1
main_config_file=/usr/local/nagios/etc/nagios.cfg
notes_url_target=_blank
physical_html_path=/usr/local/nagios/share
ping_syntax=/bin/ping -n -U -c 5 $HOSTADDRESS$
refresh_rate=90
show_context_help=0
url_html_path=/nagios
use_authentication=1
use_pending_states=1
use_ssl_authentication=0

I guess it says that only nagiosadmin has right on things... Here is how the user is defined:

192.168.80.188 - 2012-04-17 - 08h-45m-49s.png

Scott, i don't know which email you are refering to, but a "service httpd restart" do not solve the problem.

mguthrie · Post by **mguthrie** » Tue Apr 17, 2012 9:20 am

It looks like the cgi.cfg file didn't get updated properly when the admin permission was assigned, maybe because of a permissions issue with the file (??).

Code: Select all

-rw-rw-r-- 1 apache nagios 1042 Apr 13 15:32 cgi.cfg

Try creating a test admin user and see if they get added to the cgi.cfg file, if they do you can probably just recreate this admin user to fix the issue. Maybe keep an eye on the apache log as well during this process in case it fails.

Code: Select all

tail -f /var/log/httpd/error_log

Post by **srrhd** » Wed Apr 18, 2012 1:44 am

As all the users were created longtime ago maybe the problem of cgi.cfg's update was solved since.

Creating a new user force the update and now all the Admin user appear in the cgi.cfg.

Just two points that seems wierd:

* all the users are listed twice.
* after deleting the Admin test user, it still appear in the cgi.cfg.

Whatever those points aren't blocking for us. Thanks for your support, once again.

Aurelien.

Post by **srrhd** » Wed Apr 18, 2012 1:49 am

I just read in the change log that the problem of deletion is fixed in the new release. You're fast !

mguthrie · Post by **mguthrie** » Wed Apr 18, 2012 9:11 am

We'll keep our eyes open for the issue of the users being listed twice. Thanks for the update!

Nagios Support Forum

Administrator and Acknowledgment

Administrator and Acknowledgment

Re: Administrator and Acknowledgment

Re: Administrator and Acknowledgment

Re: Administrator and Acknowledgment

Re: Administrator and Acknowledgment

Re: Administrator and Acknowledgment

Re: Administrator and Acknowledgment

Re: Administrator and Acknowledgment

Re: Administrator and Acknowledgment

Re: Administrator and Acknowledgment