Sorry, but you are not authorized to commit the specifie

[bosecorp]

When I try to acknowledge an alert all while logged in to the Nagios web interface as nagiosadmin, I get a message which says:

Sorry, but you are not authorized to commit the specified command.

[Box293]

Is the user account you are logged in as a read only user?

Admin > Users > Manage Users

[bosecorp]

I am the admin

[abrist]

Does the command pipe exist?

Code: Select all

ls -la /usr/local/nagios/var/rw

Is cgi.cfg configured correctly?

Code: Select all

grep nagiosadmin /usr/local/nagios/etc/cgi.cfg

Have you implemented ldap/AD authentication in XI recently?

[bosecorp]

I have not...


root@nagmonus1:(03-30 12:27): /root
# ls -la /usr/local/nagios/var/rw
total 16
drwxrwsr-x 2 nagios nagios 4096 Mar 30 12:11 .
drwxrwxr-x 6 nagios nagios 12288 Mar 30 12:27 ..
prw-rw---- 1 nagios nagios 0 Mar 30 12:11 nagios.cmd
srw-rw---- 1 nagios nagios 0 Mar 30 12:11 nagios.qh
root@nagmonus1:(03-30 12:27): /root
# ^C
root@nagmonus1:(03-30 12:27): /root
# grep nagiosadmin /usr/local/nagios/etc/cgi.cfg
authorized_for_all_host_commands=nagiosadmin,ev12190,sj820523,ww15785,dm17745,mn14579,nn71100,gp7238,bg15022,ve12189,sk1009253,pm820550,nagiosadmin,bs1006029,mm38597,kp46240,sm1007622,el872784,ab20256,dcops
authorized_for_all_hosts=nagiosadmin,ev12190,sj820523,ww15785,dm17745,mn14579,nn71100,gp7238,bg15022,ve12189,sk1009253,pm820550,nagiosadmin,bs1006029,mm38597,kp46240,sm1007622,el872784,ab20256,fusion,dcops,jc13935,pp71402,mb3565,tt12422
authorized_for_all_service_commands=nagiosadmin,ev12190,sj820523,ww15785,dm17745,mn14579,nn71100,gp7238,bg15022,ve12189,sk1009253,pm820550,nagiosadmin,bs1006029,mm38597,kp46240,sm1007622,el872784,ab20256,dcops
authorized_for_all_services=nagiosadmin,ev12190,sj820523,ww15785,dm17745,mn14579,nn71100,gp7238,bg15022,ve12189,sk1009253,pm820550,nagiosadmin,bs1006029,mm38597,kp46240,sm1007622,el872784,ab20256,fusion,dcops,jc13935,pp71402,mb3565,tt12422
authorized_for_configuration_information=nagiosadmin,ev12190,sj820523,ww15785,dm17745,mn14579,nn71100,gp7238,bg15022,ve12189,sk1009253,pm820550,nagiosadmin,bs1006029,mm38597,kp46240,sm1007622,el872784,ab20256,fusion,dcops,jc13935,pp71402,mb3565,tt12422
authorized_for_system_commands=nagiosadmin,ev12190,sj820523,ww15785,dm17745,mn14579,nn71100,gp7238,bg15022,ve12189,sk1009253,pm820550,nagiosadmin,bs1006029,mm38597,kp46240,sm1007622,el872784,ab20256,dcops,tt12422
authorized_for_system_information=nagiosadmin,ev12190,sj820523,ww15785,dm17745,mn14579,nn71100,gp7238,bg15022,ve12189,sk1009253,pm820550,nagiosadmin,bs1006029,mm38597,kp46240,sm1007622,el872784,ab20256,dcops,tt12422
root@nagmonus1:(03-30 12:27): /root
#

[lmiltchev]

Can you run the following command and show us the output?

Code: Select all

grep nag /etc/group

[bosecorp]

# grep nag /etc/group
nagcmd59016:apache,nagios
nagios59991:nagios,apache
root@nagmonus1:(03-30 15:07): /root
#

[abrist]

Can you submit commands from the nagios core interface?

Code: Select all

http://<server ip>/nagios/

[bosecorp]

No, same result

[Box293]

Is SELinux enabled?

Code: Select all

getenforce

If is is, disable it:

Code: Select all

sed -i 's/SELINUX=enforcing/SELINUX=permissive/g' /etc/selinux/config
setenforce 0