New users cannot login to Nagvis

[snapon_admin]

I had an issue that started last week where a user that was recently added to Nagios XI could log into XI just fine, but not Nagvis. At first I thought maybe it was an issue on his PC, since his account was set up the same way as every one else (using AD authentication), but now I'm not so sure. Breakdown:

We're using AD integration. In the past, Nagvis accounts were always auto created when a user that was logged into XI tried logging into Nagvis for the first time. This user did not have a Nagvis account created for him when he tried logging in, instead he got continuous login prompt popups and then an authentication error. After much frustration trying to get him in, I decided to create a local account for him instead. Same issue. So I created a test local account. Username: test, password: test, Role: guest. I cannot login as this user. Any ideas on what the issue might be or where I can look to find out?

Edit: 2014R1.5

[abrist]

1. Is the test local account named the same as an AD user?
2. Were the correct entries in cgi.cfg get created when you created the test local user?
3. Do any of the current users have access to nagvis?

[snapon_admin]

1. No, the test account is unique.
2.The local user was created ONLY in Nagvis, not in XI, would it still show up in that file? If it is supposed to show up there, then no, it's not there. I have created accounts in Nagvis only before and was able to log into them, even if they didn't have an XI account as well. I would just be logged into XI as me, and log into nagvis as the test account, or just log in to the test account directly to https://<IP_address>/nagvis. I can't do that anymore.
3.All current users can log in without issues. Well, all 5 that I've tested anyway.

[lmiltchev]

When you create a nagios xi user, I believe it gets automatically added to NagVis however this user gets added to the "htpasswd.users" only after he/she logs in XI and accepts the agreement. Only then, the user can log in NagVis.

If you created a user in NagVis (not XI), this user won't be able to log in NagVis right away as it needs to be added to the "htpasswd.users". I suppose if you created a user, named "snapon_admin" in NagVis, you could then run from the CLI:

Code: Select all

htpasswd /usr/local/nagiosxi/etc/htpasswd.users snapon_admin

to add it. After this, you should be able to log in NagVis directly: http://ipaddress/nagvis.

[snapon_admin]

Ok, that worked for the local account. The reason we decided to use a local Nagvis account is because one user was having an issue logging in using his XI account (using AD credentials). Any reason to suspect why he might be having issues logging in besides simple user error (which I'm not above ruing out, lol)?

[abrist]

Any reason to suspect why he might be having issues logging in besides simple user error (which I'm not above ruing out, lol)?

Not really. You may want to create one more test user (an XI one), and then log into XI with that user, and then try to log into nagvis with that user. If all of that works, it sounds like a potential pebcak scenario

[snapon_admin]

lol, knowing the user I'm dealing with here that's pretty likely. Thanks for the help, you can go ahead and lock this up.

[tmcdonald]

We'll keep this open in case that doesn't end up being the cause.

[snapon_admin]

I just had a new user (different than the first one) try this and he didn't have any issues logging in. This was a brand new account, never even logged into XI before let alone Nagvis. While I watched him, he logged into XI with his AD credentials, accepted the terms, clicked on Nagvis, logged in with his AD credentials, and it let him in on the first try. I'm going to have to assume the other user is doing something wrong at this point as I can reproduce his issue.

[cmerchant]

Ok. We'll go ahead and lock this thread. Thanks.