Nagios Support Forum

looks like in RHEL8 python is controlled by the alternatives system and is set to point to nowhere by default. to fix this you need to: alternatives --set python /usr/bin/python3 what is strange is that the initial install worked without issue (5.7.0), same with a previous upgrade (5.7.2), but this ...

trying to upgrade from 5.7.2 to 5.7.5 and am getting a python error when MRTG is running post installation steps: ---- Starting Nagios XI Backup ---- Backing up Nagios Core... tar: Removing leading `/' from member names tar: /usr/local/nagios/var/rw/nagios.qh: socket ignored Backing up Nagios XI... ...

will do

Apparently the incommon CA was not in the system allow list. i had to add the incommon ca (not usertrust or aaa) to the root ca list trust anchor incommon.pem update-ca-trust additionally i did need the incommon cert in the Certificate Authority Management section of the LDAP / Active Directory Inte...

Just to keep this updated. I was able to replicate the behavior on the command line using ldapsearch. On rhel7 the ldapsearch command works no problem, it is JUST on rhel8 where we have a problem. I have opened a case with redhat and will share the solution here once i have resolution.

debug setup: $ grep -B2 -A2 DEBUG /usr/local/nagiosxi/html/includes/components/ldap_ad_integration/ldap_ad_integration.inc.php function create_auth_conn_obj($server_id='') { ldap_set_option(NULL, LDAP_OPT_DEBUG_LEVEL, 7); // Get our settings $servers_raw = get_option("ldap_ad_integration_compon...

certs added to the ancors and extract run. apache restarted and i'm still getting cert errors when i change it to ssl/tls. per a PM i got from saxx i enabled debug mode (https://support.nagios.com/kb/article/active-directory-ldap-troubleshooting-authentication-integration-600.html) but did not get a...

i got this fixed. something was wrong with my generic-service template. once i added e-mails to it, saved, applied, removed e-mails, saved and applied everything started working

$ openssl s_client -showcerts -connect adauth.marquette.edu:636 CONNECTED(00000003) depth=2 C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority verify return:1 depth=1 C = US, ST = MI, L = Ann Arbor, O = Internet2, OU = InCommon, CN = InCo...

yes i decoded the certificate. i know the cert acquisition works because i use this same method for apache/basic ldap auth