Forbidden You don't have permission to access /nagiosxi/ on

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
Locked
User avatar
benhank
Posts: 1264
Joined: Tue Apr 12, 2011 12:29 pm

Forbidden You don't have permission to access /nagiosxi/ on

Post by benhank »

I'm getting this error when trying to log into xi. I can log into core with no problem.
i ran this command:

Code: Select all

tail -n50 /var/log/httpd/error_log

Code: Select all

[Wed Aug 10 14:33:10 2016] [error] [client 172.26.70.126] File does not exist: /usr/local/nagios/share/images/logos/ibmaix.jpg, referer: http://lkendrwatsonp01/nagios/cgi-bin/config.cgi?type=hosts
[Wed Aug 10 14:33:10 2016] [error] [client 172.26.70.126] File does not exist: /usr/local/nagios/share/images/logos/lis_hmc.jpg, referer: http://lkendrwatsonp01/nagios/cgi-bin/config.cgi?type=hosts
[Wed Aug 10 14:33:10 2016] [error] [client 172.26.70.126] File does not exist: /usr/local/nagios/share/images/logos/nagios.jpg, referer: http://lkendrwatsonp01/nagios/cgi-bin/config.cgi?type=hosts
[Wed Aug 10 14:33:10 2016] [error] [client 172.26.70.126] File does not exist: /usr/local/nagios/share/images/logos/netbackup_b.png, referer: http://lkendrwatsonp01/nagios/cgi-bin/config.cgi?type=hosts
[Wed Aug 10 14:33:10 2016] [error] [client 172.26.70.126] File does not exist: /usr/local/nagios/share/images/logos/monitoring1.png, referer: http://lkendrwatsonp01/nagios/cgi-bin/config.cgi?type=hosts
[Wed Aug 10 14:33:10 2016] [error] [client 172.26.70.126] File does not exist: /usr/local/nagios/share/images/logos/emc_vmax.png, referer: http://lkendrwatsonp01/nagios/cgi-bin/config.cgi?type=hosts
[Wed Aug 10 14:33:10 2016] [error] [client 172.26.70.126] File does not exist: /usr/local/nagios/share/images/logos/ncpa.png, referer: http://lkendrwatsonp01/nagios/cgi-bin/config.cgi?type=hosts
[Wed Aug 10 14:33:10 2016] [error] [client 172.26.70.126] File does not exist: /usr/local/nagios/share/images/logos/cisco_prime.jpg, referer: http://lkendrwatsonp01/nagios/cgi-bin/config.cgi?type=hosts
[Wed Aug 10 14:33:10 2016] [error] [client 172.26.70.126] File does not exist: /usr/local/nagios/share/images/logos/xerox dp90.jpg, referer: http://lkendrwatsonp01/nagios/cgi-bin/config.cgi?type=hosts
[Wed Aug 10 14:33:10 2016] [error] [client 172.26.70.126] File does not exist: /usr/local/nagios/share/images/logos/hp-ilo.png, referer: http://lkendrwatsonp01/nagios/cgi-bin/config.cgi?type=hosts
[Wed Aug 10 14:33:10 2016] [error] [client 172.26.70.126] File does not exist: /usr/local/nagios/share/images/logos/sherlock2.png, referer: http://lkendrwatsonp01/nagios/cgi-bin/config.cgi?type=hosts
[Wed Aug 10 14:33:10 2016] [error] [client 172.26.70.126] File does not exist: /usr/local/nagios/share/images/logos/zebra_printer.png, referer: http://lkendrwatsonp01/nagios/cgi-bin/config.cgi?type=hosts
[Wed Aug 10 14:33:20 2016] [error] [client 172.26.70.126] PHP Warning:  require_once(/usr/local/nagiosxi/html/includes/../config.inc.php): failed to open stream: No such file or directory in /usr/local/nagiosxi/html/includes/common.inc.php on line 10, referer: http://lkendrwatsonp01/
[Wed Aug 10 14:33:20 2016] [error] [client 172.26.70.126] PHP Fatal error:  require_once(): Failed opening required '/usr/local/nagiosxi/html/includes/../config.inc.php' (include_path='.:/usr/share/pear:/usr/share/php') in /usr/local/nagiosxi/html/includes/common.inc.php on line 10, referer: http://lkendrwatsonp01/
[Wed Aug 10 14:35:31 2016] [notice] caught SIGTERM, shutting down
[Wed Aug 10 14:38:58 2016] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Wed Aug 10 14:38:58 2016] [notice] Digest: generating secret for digest authentication ...
[Wed Aug 10 14:38:58 2016] [notice] Digest: done
[Wed Aug 10 14:38:59 2016] [notice] Apache/2.2.15 (Unix) DAV/2 PHP/5.3.3 mod_ssl/2.2.15 OpenSSL/1.0.1e-fips configured -- resuming normal operations
[Wed Aug 10 14:39:54 2016] [error] [client 172.26.70.126] PHP Warning:  date(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/New_York' for 'EDT/-4.0/DST' instead in /var/www/html/index.php on line 91
[Wed Aug 10 14:39:54 2016] [error] [client 172.26.70.126] PHP Warning:  date(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/New_York' for 'EDT/-4.0/DST' instead in /var/www/html/index.php on line 106
[Wed Aug 10 14:39:56 2016] [error] [client 172.26.70.126] PHP Warning:  require_once(/usr/local/nagiosxi/html/includes/../config.inc.php): failed to open stream: No such file or directory in /usr/local/nagiosxi/html/includes/common.inc.php on line 10, referer: http://lkendrwatsonp01/
[Wed Aug 10 14:39:56 2016] [error] [client 172.26.70.126] PHP Fatal error:  require_once(): Failed opening required '/usr/local/nagiosxi/html/includes/../config.inc.php' (include_path='.:/usr/share/pear:/usr/share/php') in /usr/local/nagiosxi/html/includes/common.inc.php on line 10, referer: http://lkendrwatsonp01/
[Wed Aug 10 16:07:43 2016] [error] [client 172.26.70.126] PHP Warning:  require_once(/usr/local/nagiosxi/html/includes/../config.inc.php): failed to open stream: No such file or directory in /usr/local/nagiosxi/html/includes/common.inc.php on line 10, referer: http://lkendrwatsonp01/
[Wed Aug 10 16:07:43 2016] [error] [client 172.26.70.126] PHP Fatal error:  require_once(): Failed opening required '/usr/local/nagiosxi/html/includes/../config.inc.php' (include_path='.:/usr/share/pear:/usr/share/php') in /usr/local/nagiosxi/html/includes/common.inc.php on line 10, referer: http://lkendrwatsonp01/
[Wed Aug 10 16:07:45 2016] [error] [client 172.26.70.126] PHP Warning:  require_once(/usr/local/nagiosxi/html/includes/../config.inc.php): failed to open stream: No such file or directory in /usr/local/nagiosxi/html/includes/common.inc.php on line 10, referer: http://lkendrwatsonp01/
[Wed Aug 10 16:07:45 2016] [error] [client 172.26.70.126] PHP Fatal error:  require_once(): Failed opening required '/usr/local/nagiosxi/html/includes/../config.inc.php' (include_path='.:/usr/share/pear:/usr/share/php') in /usr/local/nagiosxi/html/includes/common.inc.php on line 10, referer: http://lkendrwatsonp01/
[Wed Aug 10 16:59:26 2016] [error] [client 172.26.70.126] PHP Warning:  date(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/New_York' for 'EDT/-4.0/DST' instead in /var/www/html/index.php on line 91
[Wed Aug 10 16:59:26 2016] [error] [client 172.26.70.126] PHP Warning:  date(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/New_York' for 'EDT/-4.0/DST' instead in /var/www/html/index.php on line 106
[Wed Aug 10 16:59:28 2016] [error] [client 172.26.70.126] (13)Permission denied: access to /nagiosxi/ denied, referer: http://lkendrwatsonp01/
[Wed Aug 10 16:59:33 2016] [error] [client 172.26.70.126] (13)Permission denied: access to /nagiosxi/ denied, referer: http://lkendrwatsonp01/
[Wed Aug 10 17:07:22 2016] [error] [client 172.26.70.126] (13)Permission denied: access to /nagiosxi/ denied, referer: http://lkendrwatsonp01/
[Wed Aug 10 17:07:24 2016] [error] [client 172.26.70.126] (13)Permission denied: access to /nagiosxi/ denied, referer: http://lkendrwatsonp01/
[Wed Aug 10 17:07:25 2016] [error] [client 172.26.70.126] (13)Permission denied: access to /nagiosxi/ denied, referer: http://lkendrwatsonp01/
[Wed Aug 10 17:07:26 2016] [error] [client 172.26.70.126] (13)Permission denied: access to /nagiosxi/ denied, referer: http://lkendrwatsonp01/
[Wed Aug 10 17:07:28 2016] [error] [client 172.26.70.126] (13)Permission denied: access to /nagiosxi/ denied, referer: http://lkendrwatsonp01/
[Wed Aug 10 17:07:29 2016] [error] [client 172.26.70.126] (13)Permission denied: access to /nagiosxi/ denied, referer: http://lkendrwatsonp01/
[Wed Aug 10 17:07:31 2016] [error] [client 172.26.70.126] (13)Permission denied: access to /nagiosxi/ denied, referer: http://lkendrwatsonp01/
[Wed Aug 10 17:07:32 2016] [error] [client 172.26.70.126] (13)Permission denied: access to /nagiosxi/ denied, referer: http://lkendrwatsonp01/
[Wed Aug 10 17:11:16 2016] [notice] caught SIGTERM, shutting down
[Wed Aug 10 17:11:17 2016] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Wed Aug 10 17:11:17 2016] [notice] Digest: generating secret for digest authentication ...
[Wed Aug 10 17:11:17 2016] [notice] Digest: done
[Wed Aug 10 17:11:17 2016] [notice] Apache/2.2.15 (Unix) DAV/2 PHP/5.3.3 mod_ssl/2.2.15 OpenSSL/1.0.1e-fips configured -- resuming normal operations
[Wed Aug 10 17:11:22 2016] [error] [client 172.26.70.126] (13)Permission denied: access to /nagiosxi/ denied, referer: http://lkendrwatsonp01/
[Wed Aug 10 17:11:23 2016] [error] [client 172.26.70.126] (13)Permission denied: access to /nagiosxi/ denied, referer: http://lkendrwatsonp01/
[Wed Aug 10 17:11:28 2016] [error] [client 172.26.70.126] (13)Permission denied: access to /nagiosxi/ denied, referer: http://lkendrwatsonp01/
[Thu Aug 11 11:11:14 2016] [error] [client 172.26.70.118] PHP Warning:  date(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/New_York' for 'EDT/-4.0/DST' instead in /var/www/html/index.php on line 91
[Thu Aug 11 11:11:14 2016] [error] [client 172.26.70.118] PHP Warning:  date(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/New_York' for 'EDT/-4.0/DST' instead in /var/www/html/index.php on line 106
[Thu Aug 11 11:11:16 2016] [error] [client 172.26.70.118] (13)Permission denied: access to /nagiosxi/ denied, referer: http://lkendrwatsonp01/
as well as:

Code: Select all

[root@lkendrwatsonp01 ~]# tail -n10 /var/log/httpd/ssl_error_log
[Wed Aug 10 14:01:54 2016] [warn] RSA server certificate is a CA certificate (Ba                                                                                                                                                              sicConstraints: CA == TRUE !?)
[Wed Aug 10 14:01:54 2016] [warn] RSA server certificate is a CA certificate (Ba                                                                                                                                                              sicConstraints: CA == TRUE !?)
[Wed Aug 10 14:03:26 2016] [warn] RSA server certificate is a CA certificate (Ba                                                                                                                                                              sicConstraints: CA == TRUE !?)
[Wed Aug 10 14:03:26 2016] [warn] RSA server certificate is a CA certificate (Ba                                                                                                                                                              sicConstraints: CA == TRUE !?)
[Wed Aug 10 14:21:02 2016] [warn] RSA server certificate is a CA certificate (Ba                                                                                                                                                              sicConstraints: CA == TRUE !?)
[Wed Aug 10 14:21:02 2016] [warn] RSA server certificate is a CA certificate (Ba                                                                                                                                                              sicConstraints: CA == TRUE !?)
[Wed Aug 10 14:38:58 2016] [warn] RSA server certificate is a CA certificate (Ba                                                                                                                                                              sicConstraints: CA == TRUE !?)
[Wed Aug 10 14:38:59 2016] [warn] RSA server certificate is a CA certificate (Ba                                                                                                                                                              sicConstraints: CA == TRUE !?)
[Wed Aug 10 17:11:17 2016] [warn] RSA server certificate is a CA certificate (Ba                                                                                                                                                              sicConstraints: CA == TRUE !?)
[Wed Aug 10 17:11:17 2016] [warn] RSA server certificate is a CA certificate (Ba                                                                                                                                                              sicConstraints: CA == TRUE !?)
[root@lkendrwatsonp01 ~]#
Proudly running:
NagiosXI 5.4.12 2 node Prod Env 2500 hosts, 13,000 services
Nagiosxi 5.5.7(test env) 2500 hosts, 13,000 services
Nagios Logserver 2 node Prod Env 500 objects sending
Nagios Network Analyser
Nagios Fusion
Top
tmcdonald
Posts: 9117
Joined: Mon Sep 23, 2013 8:40 am

Re: Forbidden You don't have permission to access /nagiosxi

Post by tmcdonald »

Check out some of the items in this article:

https://www.petefreitag.com/item/793.cfm

Looks like either permissions on a directory, or Apache misconfig.
Former Nagios employee
Top
rkennedy
Posts: 6579
Joined: Mon Oct 05, 2015 11:45 am

Re: Forbidden You don't have permission to access /nagiosxi

Post by rkennedy »

Weird - did anything happen to trigger this? Was anything changed recently? Just trying to get a perspective what started the issue.

Can you post / PM your entire /etc/httpd/conf.d/ folder for us to look at?
Former Nagios Employee
Top
User avatar
benhank
Posts: 1264
Joined: Tue Apr 12, 2011 12:29 pm

Re: Forbidden You don't have permission to access /nagiosxi

Post by benhank »

somehow the permissions on the nagiosxi directory changed from 0755 to something else. im gonna try to do a restore and see if that fixes it
Proudly running:
NagiosXI 5.4.12 2 node Prod Env 2500 hosts, 13,000 services
Nagiosxi 5.5.7(test env) 2500 hosts, 13,000 services
Nagios Logserver 2 node Prod Env 500 objects sending
Nagios Network Analyser
Nagios Fusion
Top
User avatar
benhank
Posts: 1264
Joined: Tue Apr 12, 2011 12:29 pm

Re: Forbidden You don't have permission to access /nagiosxi

Post by benhank »

the restore fixed it. odd tho. but hey its running on a windows machine so what can yah say...
Proudly running:
NagiosXI 5.4.12 2 node Prod Env 2500 hosts, 13,000 services
Nagiosxi 5.5.7(test env) 2500 hosts, 13,000 services
Nagios Logserver 2 node Prod Env 500 objects sending
Nagios Network Analyser
Nagios Fusion
Top
rkennedy
Posts: 6579
Joined: Mon Oct 05, 2015 11:45 am

Re: Forbidden You don't have permission to access /nagiosxi

Post by rkennedy »

Weird. Not sure what would have changed the permissions :|

@benhank - are we good to close this one up?
Former Nagios Employee
Top
User avatar
benhank
Posts: 1264
Joined: Tue Apr 12, 2011 12:29 pm

Re: Forbidden You don't have permission to access /nagiosxi

Post by benhank »

yes sir!
Proudly running:
NagiosXI 5.4.12 2 node Prod Env 2500 hosts, 13,000 services
Nagiosxi 5.5.7(test env) 2500 hosts, 13,000 services
Nagios Logserver 2 node Prod Env 500 objects sending
Nagios Network Analyser
Nagios Fusion
Top
Locked

Return to “Nagios XI”