Fusion 4 data pulling issue from nagios core 4.3.2

[jiec168]

Hi,

We have been using nagios core for two years and lately we upgraded it to 4.3.2. We are doing a proof of concept on fusion before purchasing the license.

I have installed a trial fusion 4 server in a clean machine in west coast data center and configured it with two nagios core 4.3.2 servers respectively in east coast and singapore data centers. But the fusion server can't pull data from the nagios servers. Where did I go wrong in configuration? Attached two screenshots.

Thanks.
-- Jie

[bheden]

The cgi-bin field must be filled out with /cgi-bin/ - the value there is simply a placeholder to identify the normally selected value.

That's what the problem looks like to me based on the screenshot.

[jiec168]

I added /nagios/cgi-bin/ in the box. It is still not working. I do notice the error message "Authentication Failed ()" when I move my mouse over the orange ! button. I put in login/password in the fields which I use to login into the remote nagios server with admin privilege. Any idea?

Thanks.

[kyang]

Hi @jiec168,

From what @bheden said, try adding /cgi-bin/ in the box and not /nagios/cgi-bin/.

For the Authentication Fail, are you able to SSH into the nagios server you are trying to add?

So the admin credentials used to log into core are not working?

You can see if the admin guide helps you with any understanding

https://assets.nagios.com/downloads/nag ... vanced.php

[dwhitfield]

Thanks @kyang!

OP, let us know if you have any additional questions!

[jiec168]

Thanks for the reply.

- To get the tac.cgi page from one of our nagios servers, the url is http://nagios.east.smf.uc.int/nagios/cgi-bin/tac.cgi. That is why I put in /nagios/cgi-bin/ in the config there.

- From the fusion server, I can ssh into nagios servers with a role user but not the apache role user in which we run our httpd. Do I need to change the httpd run to that role user?

- From the fusion server, I can telnet into nagios servers port 80 without any firewall issue though.

- We don't have specific nagiosadmin account setup in nagios servers. Anyone who can log into the nagios via ldap or htpasswd can do anything like admin. So I just use one login/password that I can access, for example, http://nagios.east.smf.uc.int/nagios/cgi-bin/tac.cgi

authorized_for_system_information=*
authorized_for_configuration_information=*
authorized_for_system_commands=*
authorized_for_all_services=*
authorized_for_all_hosts=*
authorized_for_all_service_commands=*
authorized_for_all_host_commands=*

- from my google chrome browser where I use to access the fusion server, it shows the following warning in the console
[Deprecation] Subresource requests whose URLs contain embedded credentials (e.g. `https://user:pass@host/`) are blocked. See https://www.chromestatus.com/feature/5669008342777856 for more details.

The authentication failed error still exists. Any idea?

Thanks.

[kyang]

The nagios part is for core, but the /cgi-bin/ is what goes into the CGI Path.

That is all that needs to be put in there. Please try it this way, and let me know the result.

This works for me on my Fusion Server when I add a Core Server

[jiec168]

Hi @kyang,

I tried all the combinations. I changed the field to /cgi-bin/ as you suggested. I noticed that you are using ip instead of hostname in the url and followed by /nagios/ in your config. So I did that change too. I created a nagiosadmin login and password for my nagios servers and am able to login and call all the cgi scripts in the remote nagios servers. I also change the local time zone for each. But still no luck

Capture.PNG

[tgriep]

We need to see if there are any errors in the poller log files.
Can you run the following as root and post the /tmp/info.txt file?

Code: Select all

tail -n 100 /usr/local/nagiosfusion/var/log/poll* >/tmp/info.txt
ps -ef --cols=300 >>/tmp/info.txt

[jiec168]

Hi @tgriep,

Attached is the info.txt file. Thanks.