Nagios Support Forum

There seems to be a customised message whilst login to the nagiosxi. Eg: sorry cant let you do this etc. FYI - this is a customised one, but i am unable to locate the file. Could anyone throw some light / guide please. Thanks in advance.

(FYI - This is whilst trying to login to the page, maybe checking for some authentication/permissions or so.)

Hey Masa,

Does the message read "NSP: Sorry Dave, I can’t let you do that"?

If so, this is a message that occurs when cross-site request forgery is suspected. One possible solution is to clear your browser cache and try to login again. This message also appears when your system time is out of sync with your browser.

Dear Cnorell,

Firstly thank you for the response.

Yes - this is exactly the message. but how do I overcome it permanently? as, we would not want or ask all users to keep clearing the cache or logging again.
Also, is this a known bug by any chance?

Any help/guidance would be appreciated.

cnorell wrote: ↑Wed Aug 23, 2023 9:34 am Hey Masa,

Does the message read "NSP: Sorry Dave, I can’t let you do that"?

If so, this is a message that occurs when cross-site request forgery is suspected. One possible solution is to clear your browser cache and try to login again. This message also appears when your system time is out of sync with your browser.

Masa,

If you want, you can extend the session timeout duration in Nagios xi by navigating to Admin > System Settings > Security and modifying the "Session Timeout" field. Note that you can set a value of 0 to disable timeout.

If that doesn't solve your issue, I would recommend verifying that your system time and browser time are in sync.

Let me know if that helps.

Elastic Man

MasaNagios wrote: ↑Wed Aug 23, 2023 6:44 am There seems to be a customised message whilst login to the nagiosxi. Eg: sorry cant let you do this etc. FYI - this is a customised one, but i am unable to locate the file. Could anyone throw some light / guide please. Thanks in advance.

(FYI - This is whilst trying to login to the page, maybe checking for some authentication/permissions or so.)

The main configuration file for Nagios xi should be located in the /usr/local/nagiosxi/html/config.inc.php path. Open this file and search for any custom messages that might be displayed during the login process.

Hey @MasaNagios:

cnorell covered it pretty well, but just to clarify...

The message simply means that you were logged out and your session ended and was invalidated. This is a necessary security precaution for any website with a login, (though our choice of message isn't very helpful!).

Nobody wants to clear their cache, and you shouldn't have to. Just close the window/tab and open a new one to log in.

To reduce the need for logging in, there is no need to edit any config files. As pointed out above, session length can be extended in the Admin/System Settings security tab. You can enter 0 min to make your session unlimited, but this isn't the best idea from a security standpoint.

Hey @MasaNagios,


Wanted to check in and ask if you got this issue fixed. Let us know if we can assist further!