NagiosXI Installation failure [403 forbidden error]

[bryjonez]

Clean install on RHEL:

Nagios XI Installation Log (clip)
==========================
DATE: Tue Aug 5 18:25:01 CDT 2014

DISTRO INFO:
RedHatEnterpriseServer
6.5
x86_64

THIS IS A NEW INSTALL!

INSTALLING:
full=2014R1.3
major=2014
minor=R1.3
releasedate=2014-07-17
release=406

I am getting this error:

------------------------------------------------------------------------------------------------

Sleeping...
NOTE: If prompted, enter the MySQL root password
NagiosQL database appears OK - continuing...
NDOUtils database appears OK - continuing...
Found config files to import - continuing...
URL: http://localhost/nagiosxi/includes/components/ccm/
CMDLINE
/usr/bin/wget --save-cookies nagiosql.cookies --keep-session-cookies http://localhost/nagiosxi/includes/components/ccm/ --no-check-certificate --post-data 'submit=Login&hidelog=true&loginSubmitted=true&username=nagiosxi&password=n@gweb' -O nagiosql.login--2014-08-06 16:52:13-- http://localhost/nagiosxi/includes/components/ccm/
Resolving localhost... 127.0.0.1
Connecting to localhost|127.0.0.1|:80... connected.
HTTP request sent, awaiting response... 403 Forbidden
2014-08-06 16:52:13 ERROR 403: Forbidden.

NAGIOSQL LOGIN FAILED!
RESULT=1

===================
INSTALLATION ERROR!
===================
Installation step failed - exiting.
Check for error messages in the install log (install.log).

If you require assistance in resolving the issue, please include install.log
in your communications with Nagios XI technical support.

The script that failed was: './E-importnagiosql'

--------------------------------------------------------------------
Install log file is attached

[abrist]

Did you change any of the default passwords for postgres/mysql?
Do you have restrictive firewall rules set? (if so, stop iptables for the install):

Code: Select all

service iptables stop

Is selinux enabled?

Code: Select all

getenforce

[bryjonez]

Thanks for the suggestions:

I have not changed the default passwords for postgres or MySQL
I stopped iptables and SELinux was already disabled

And I still get the same 403 error.

Can you tell me how to change the passwords to the defaults for postgres and MySQL? I will set them to the defaults and try again.

Thanks
Bryan

[abrist]

Was this a clean minimal install, or was it a corporate build/image?
It looks like the dbs were configured fine:

Initializing MySQL...
MySQL root password is now set to: nagiosxi
MySQL initialized OK
Database servers initialized OK
/etc/services updated
sudoers configured OK
iptables: Setting chains to policy ACCEPT: filter [60G[[0;32m OK [0;39m]

iptables: Flushing firewall rules: [60G[[0;32m OK [0;39m]

iptables: Unloading modules: [60G[[0;32m OK [0;39m]

iptables: Applying firewall rules: [60G[[0;32m OK [0;39m]

Can you try running the following wget:

Code: Select all

/usr/bin/wget --save-cookies nagiosql.cookies --keep-session-cookies http://localhost/nagiosxi/includes/components/ccm/ --no-check-certificate --post-data 'submit=Login&hidelog=true&loginSubmitted=true&username=nagiosxi&password=n@gweb' -O nagiosql.login--2014-08-06 16:52:13-- http://localhost/nagiosxi/includes/components/ccm/

And the following curls:

Code: Select all

curl http://localhost
curl http://localhost/nagiosxi

[lmiltchev]

Are you using SSL or proxy? What are the passwords that you see in "/usr/local/nagiosxi/html/config.inc.php" under "db-specific connection information"? Did you have XI previously installed on this server? You are not performing the "new" install on a "clean" system...

[bryjonez]

Was this a clean minimal install, or was it a corporate build/image?
It looks like the dbs were configured fine:

Initializing MySQL...
MySQL root password is now set to: nagiosxi
MySQL initialized OK
Database servers initialized OK
/etc/services updated
sudoers configured OK
iptables: Setting chains to policy ACCEPT: filter [60G[[0;32m OK [0;39m]

iptables: Flushing firewall rules: [60G[[0;32m OK [0;39m]

iptables: Unloading modules: [60G[[0;32m OK [0;39m]

iptables: Applying firewall rules: [60G[[0;32m OK [0;39m]

Can you try running the following wget:

Code: Select all

/usr/bin/wget --save-cookies nagiosql.cookies --keep-session-cookies http://localhost/nagiosxi/includes/components/ccm/ --no-check-certificate --post-data 'submit=Login&hidelog=true&loginSubmitted=true&username=nagiosxi&password=n@gweb' -O nagiosql.login--2014-08-06 16:52:13-- http://localhost/nagiosxi/includes/components/ccm/

And the following curls:

Code: Select all

curl http://localhost
curl http://localhost/nagiosxi

Here is the output from the above command line:

Code: Select all

# /usr/bin/wget --save-cookies nagiosql.cookies --keep-session-cookies http://localhost/nagiosxi/includes/components/ccm/ --no-check-certificate --post-data 'submit=Login&hidelog=true&loginSubmitted=true&username=nagiosxi&password=n@gweb' -O nagiosql.login--2014-08-06 16:52:13-- http://localhost/nagiosxi/includes/components/ccm/
--2014-08-11 18:08:55--  http://localhost/nagiosxi/includes/components/ccm/
Resolving localhost... 127.0.0.1
Connecting to localhost|127.0.0.1|:80... connected.
HTTP request sent, awaiting response... 403 Forbidden
2014-08-11 18:08:55 ERROR 403: Forbidden.

--2014-08-11 18:08:55--  ftp://16/52:13--
           => “nagiosql.login--2014-08-06”
Resolving 16... 0.0.0.16
Connecting to 16|0.0.0.16|:21... failed: Invalid argument.
--2014-08-11 18:08:55--  http://localhost/nagiosxi/includes/components/ccm/
Connecting to localhost|127.0.0.1|:80... connected.
HTTP request sent, awaiting response... 403 Forbidden
2014-08-11 18:08:55 ERROR 403: Forbidden.

Here is the output from the curl commands:

curl http://localhost

Code: Select all

# curl http://localhost
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en">
        <head>
                <title>Test Page for the Apache HTTP Server on Red Hat Enterprise Linux</title>
                <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
                <style type="text/css">
                        /*<![CDATA[*/
                        body {
                                background-color: #fff;
                                color: #000;
                                font-size: 0.9em;
                                font-family: sans-serif,helvetica;
                                margin: 0;
                                padding: 0;
                        }
                        :link {
                                color: #c00;
                        }
                        :visited {
                                color: #c00;
                        }
                        a:hover {
                                color: #f50;
                        }
                        h1 {
                                text-align: center;
                                margin: 0;
                                padding: 0.6em 2em 0.4em;
                                background-color: #900;
                                color: #fff;
                                font-weight: normal;
                                font-size: 1.75em;
                                border-bottom: 2px solid #000;
                        }
                        h1 strong {
                                font-weight: bold;
                        }
                        h2 {
                                font-size: 1.1em;
                                font-weight: bold;
                        }
                        hr {
                                display: none;
                        }
                        .content {
                                padding: 1em 5em;
                        }
                        .content-columns {
                                /* Setting relative positioning allows for
                                absolute positioning for sub-classes */
                                position: relative;
                                padding-top: 1em;
                        }
                        .content-column-left {
                                /* Value for IE/Win; will be overwritten for other browsers */
                                width: 47%;
                                padding-right: 3%;
                                float: left;
                                padding-bottom: 2em;
                        }
                        .content-column-left hr {
                                display: none;
                        }
                        .content-column-right {
                                /* Values for IE/Win; will be overwritten for other browsers */
                                width: 47%;
                                padding-left: 3%;
                                float: left;
                                padding-bottom: 2em;
                        }
                        .content-columns>.content-column-left, .content-columns>.content-column-right {
                                /* Non-IE/Win */
                        }
                        img {
                                border: 2px solid #fff;
                                padding: 2px;
                                margin: 2px;
                        }
                        a:hover img {
                                border: 2px solid #f50;
                        }
                        /*]]>*/
                </style>
        </head>

        <body>
                <h1>Red Hat Enterprise Linux <strong>Test Page</strong></h1>

                <div class="content">
                        <div class="content-middle">
                                <p>This page is used to test the proper operation of the Apache HTTP server after it has been installed. If you can read this page, it means that the Apache HTTP server installed at this site is working properly.</p>
                        </div>
                        <hr />

                        <div class="content-columns">
                                <div class="content-column-left">
                                        <h2>If you are a member of the general public:</h2>

                                        <p>The fact that you are seeing this page indicates that the website you just visited is either experiencing problems, or is undergoing routine maintenance.</p>

                                        <p>If you would like to let the administrators of this website know that you've seen this page instead of the page you expected, you should send them e-mail. In general, mail sent to the name "webmaster" and directed to the website's domain should reach the appropriate person.</p>

                                        <p>For example, if you experienced problems while visiting http://www.example.com, you should send e-mail to "[email protected]".</p>

                                        <p>For information on Red Hat Enterprise Linux, please visit the <a href="http://www.redhat.com/">Red Hat, Inc. website</a>. The documentation for Red Hat Enterprise Linux is <a href="http://www.redhat.com/docs/manuals/enterprise/">available on the Red Hat, Inc. website</a>.</p>
                                        <hr />
                                </div>

                                <div class="content-column-right">
                                        <h2>If you are the website administrator:</h2>

                                        <p>You may now add content to the directory <tt>/var/www/html/</tt>. Note that until you do so, people visiting your website will see this page, and not your content. To prevent this page from ever being used, follow the instructions in the file <tt>/etc/httpd/conf.d/welcome.conf</tt>.</p>

                                        <p>You are free to use the image below on web sites powered by the Apache HTTP Server:</p>

                                        <p align="center"><a href="http://httpd.apache.org/"><img src="/icons/apache_pb2.gif" alt="[ Powered by Apache ]"/></a></p>

                                </div>
                        </div>
                </div>
        </body>
</html>

curl http://localhost/nagiosxi

Code: Select all

# curl http://localhost/nagiosxi
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="http://localhost/nagiosxi/">here</a>.</p>
<hr>
<address>Apache/2.2.15 (Red Hat) Server at localhost Port 80</address>
</body></html>

curl http://localhost/nagios for giggles....

Code: Select all

# curl http://localhost/nagios
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>401 Authorization Required</title>
</head><body>
<h1>Authorization Required</h1>
<p>This server could not verify that you
are authorized to access the document
requested.  Either you supplied the wrong
credentials (e.g., bad password), or your
browser doesn't understand how to supply
the credentials required.</p>
<hr>
<address>Apache/2.2.15 (Red Hat) Server at localhost Port 80</address>
</body></html>

Are you using SSL or proxy?

No SSL or Proxy.

db-specific connection information

Code: Select all

// db-specific connection information
$cfg['db_info'] = array(
    "nagiosxi" => array(
        "dbtype" => 'pgsql',
        "dbserver" => '',
        "user" => 'nagiosxi',
        "pwd" => 'n@gweb',
        "db" => 'nagiosxi',
        "dbmaint" => array( // variables affecting maintenance of db
            "max_auditlog_age" => 30, // max time (in DAYS) to keep audit log entries
            "max_commands_age" => 480, // max time (minutes) to keep commands
            "max_events_age" => 480, // max time (minutes) to keep events
            "optimize_interval" => 60, // time (in minutes) between db optimization runs
            "repair_interval" => 0, // time (in minutes) between db repair runs
        ),
    ),
    "ndoutils" => array(
        "dbtype" => 'mysql',
        "dbserver" => 'localhost',
        "user" => 'ndoutils',
        "pwd" => 'n@gweb',
        "db" => 'nagios',
        "dbmaint" => array( // variables affecting maintenance of ndoutils db

            "max_externalcommands_age" => 7, // max time (in DAYS) to keep external commands
            "max_logentries_age" => 90, // max time (in DAYS) to keep log entries
            "max_statehistory_age" => 730, // max time (in DAYS) to keep state history information
            "max_notifications_age" => 90, // max time (in DAYS) to keep notifications
            "max_timedevents_age" => 5, // max time (minutes) to keep timed events
            "max_systemcommands_age" => 5, // max time (minutes) to keep system commands
            "max_servicechecks_age" => 5, // max time (minutes) to keep service checks
            "max_hostchecks_age" => 5, // max time (minutes) to keep host checks
            "max_eventhandlers_age" => 5, // max time (minutes) to keep event handlers
            "optimize_interval" => 60, // time (in minutes) between db optimization runs
            "repair_interval" => 0, // time (in minutes) between db repair runs
        ),
    ),
    "nagiosql" => array(
        "dbtype" => 'mysql',
        "dbserver" => 'localhost',
        "user" => 'nagiosql',
        "pwd" => 'n@gweb',
        "db" => 'nagiosql',
        "dbmaint" => array( // variables affecting maintenance of db
            "max_logbook_age" => 480, // max time (minutes) to keep log book records
            "optimize_interval" => 60, // time (in minutes) between db optimization runs
            "repair_interval" => 0, // time (in minutes) between db repair runs
        ),
    ),
);

Did you have XI previously installed on this server?

No

You are not performing the "new" install on a "clean" system...

Not sure if that was supposed to be a question or a statement?

This is a fresh clean install.

Thanks
Bryan

[scottwilkerson]

No

You are not performing the "new" install on a "clean" system...

Not sure if that was supposed to be a question or a statement?

This is a fresh clean install.

It should have been a question. Was this a minimal system to begin with? The reason I ask is because I looked at your logs and I don't see httpd being installed, which leads me to believe this may be a corporate build which may have different httpd.conf configuration than is expected by the installer.

[bryjonez]

Hi Scott,

Our customer has told me it was a plain vanilla install. Not sure if they installed Apache as part of the install or not.

Is it possible to work around this issue? I have root access... as of right now...

Thanks
Bryan

[tmcdonald]

I would definitely find out if apache was installed beforehand or not. By "fresh clean install" we really do mean a minimal install (not base or core) of CentOS/RHEL with little to nothing else done to it. Installing vim and wget are fine, but installing apache first (depending on how it was done) could mess things up a bit.

[bryjonez]

I have asked the customer if Apache was installed as part of the OS install, should hear something back by Friday 8/15.

If it was then what do we do? Ask for a fresh clean minimal install? Or is there a workaround I can try.

Regards
Bryan