LDAP / AD Integration option in Admin leads to blank page

[krobertson71]

Upgraded our test environment from 2.7 to 5.2.0

Under admin, when clicking on 'LDAP / AD Integration" we receive nothing but a blank page.

I saw this screenshot in another thread that referred to another component we seem to be missing.

components.png

We do not have the LDAP / Active Directory Integration v 1.01 component in our list after the upgrade. Just the original AD component and another one for LDAP.

The upgrade "Seemed" to go well. We upgraded from within the GUI. The console showed a successful upgrade "UPGRADE COMPLETE!!" with 0 errors. However the gui stated that the upgrade had failed.

We restarted the server and now it states we are on the updated version.. however we have no snapshot for this upgrade.

Any Ideas?

[Box293]

I saw this screenshot in another thread that referred to another component we seem to be missing.



We do not have the LDAP / Active Directory Integration v 1.01 component in our list after the upgrade. Just the original AD component and another one for LDAP.

This component may appear further down the list on the Manage Components page as this page is split into "Components that can be updated / deleted" and "Core Components". Can you confirm this.

Run this command in an SSH session:

Code: Select all

tail -f /var/log/httpd/error_log

Now go and click on 'LDAP / AD Integration" to generate the blank page. Is there any output produced in the SSH session?

[krobertson71]

Waiting on our Linux team to provide the proper sudo access to read those files. Unfortunately we do not have full root on our servers.

I should be able to provide this information later today.

[hsmith]

Let us know what you come up with.

Thanks!

[krobertson71]

OK tailed the error_log and then selected LDAP / AD Integration. Did this multiple times. Nothing appeared in the error_log and still received the blank page.

This is from the access_log for when I clicked on the LDAP / AD Integration link::

Code: Select all

00.A (http://www.bin-co.com/php/scripts/load/)"
::1 - - [14/Oct/2015:17:06:01 -0400] "POST /nagiosxi/backend/ HTTP/1.1" 200 812 "-" "BinGet/1.00.A (http://www.bin-co.com/php/scripts/load/)"

Also attaching the full error log file.

[tgriep]

Could you post the upgrade log so we can review it? Below if the file we need.

Code: Select all

/usr/local/nagiosxi/tmp/upgrade.log

[krobertson71]

Here you go.

[mp4783]

For what it's worth, I did an initial Nagios XI 5R1.0 installation and the new AD/LDAP stuff didn't work (it may have been my fault entirely), but I did get the Admin page for it (this is the new AD/LDAP, not the deprecated, legacy Component version). I then upgraded to Nagios XI 5R2.0 and after a few configuration tweaks (which admittedly could have been my problem all along), it worked.

[krobertson71]

What tweaks did you perform?

[tmcdonald]

This is not at all related to your problem, but I would talk to your security team about those logs. You're being scanned by something and it isn't friendly:

Code: Select all

[Wed Oct 14 09:50:33 2015] [error] [client 152.16.194.228] Invalid URI in request GET ././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././../../../../../../../../ HTTP/1.1
[Wed Oct 14 09:50:33 2015] [error] [client 152.16.194.228] File does not exist: /var/www/html/_mt
[Wed Oct 14 09:50:33 2015] [error] [client 152.16.194.228] File does not exist: /var/www/html/admin.cgi
[Wed Oct 14 09:50:33 2015] [error] [client 152.16.194.228] File does not exist: /var/www/html/administrator.cgi
[Wed Oct 14 09:50:33 2015] [error] [client 152.16.194.228] File does not exist: /var/www/html/buglist.cgi
[Wed Oct 14 09:50:33 2015] [error] [client 152.16.194.228] File does not exist: /var/www/html/cgi
[Wed Oct 14 09:50:33 2015] [error] [client 152.16.194.228] script not found or unable to stat: /var/www/cgi-bin/admin.cgi
[Wed Oct 14 09:50:33 2015] [error] [client 152.16.194.228] script not found or unable to stat: /var/www/cgi-bin/admin.pl
[Wed Oct 14 09:50:33 2015] [error] [client 152.16.194.228] script not found or unable to stat: /var/www/cgi-bin/bugreport.cgi
[Wed Oct 14 09:50:33 2015] [error] [client 152.16.194.228] script not found or unable to stat: /var/www/cgi-bin/clwarn.cgi
[Wed Oct 14 09:50:33 2015] [error] [client 152.16.194.228] script not found or unable to stat: /var/www/cgi-bin/count.cgi
[Wed Oct 14 09:50:33 2015] [error] [client 152.16.194.228] script not found or unable to stat: /var/www/cgi-bin/Count.cgi

Classic evidence of a brute-force scanner trying to find commonly-used admin pages or exploits.



More to the point, I too am curious what config changes would fix this.