failed to upgrade from 5.2.0 to 5.2.2

[doneil326]

Can you run the following and post the output?

Code: Select all

ls -l /usr/local/nagiosxi/html/includes/components/ccm/
ls -l /usr/local/nagiosxi/scripts
grep -r htacc /etc/httpd/*

Thanks

[rkennedy]

When trying to update, were you using the nagios, or root account?

Additionally, is there any kind of custom security rules setup on this box?

[ssax]

Please take the attached files and replace these:

Code: Select all

/etc/httpd/conf/httpd.conf
/etc/httpd/conf.d/nagiosxi.conf
/etc/httpd/conf.d/ssl.conf

http_configs.zip

Then restart httpd:

Code: Select all

service httpd restart

Make sure that you go to Admin > System Settings and change your Program URL (and External URL if you have it set) from http:// to https:// then click the Update Settings button.

Also, make sure that you go to Configure > Core Config Manager > Config Manager Admin > Config Manager Settings and set Server Protocol to HTTPS, then click the Save button.

Let us know if that works for you.


Thank you

[doneil326]

These do not work. i get errors trying to browser to nagiosxi.lifelock.com/nagiosxi/ after this. What options are you trying to update? this seemed to update all the virtualhost syntax for 80/443 away from what is recommended in the documentation.

This is my error:

Forbidden

You don't have permission to access /nagiosxi/ on this server.

Apache/2.2.15 (Red Hat) Server at nagiosxi.lifelock.com Port 443

It seems to revolve around trying to put the redirect in httpd.conf instead of nagiosxi.conf

[Wed Nov 25 16:23:20 2015] [error] [client 10.21.9.246] Options FollowSymLinks or SymLinksIfOwnerMatch is off which implies that RewriteRule directive is forbidden: /usr/local/nagiosxi/html/ajaxhelper.php, referer: https://nagiosxi.lifelock.com/nagiosxi/ ... ow=api.php
[Wed Nov 25 16:23:23 2015] [error] [client 127.0.0.1] Options FollowSymLinks or SymLinksIfOwnerMatch is off which implies that RewriteRule directive is forbidden: /usr/local/nagiosxi/html/backend/
[Wed Nov 25 16:23:44 2015] [error] [client 127.0.0.1] Options FollowSymLinks or SymLinksIfOwnerMatch is off which implies that RewriteRule directive is forbidden: /usr/local/nagiosxi/html/backend/
[Wed Nov 25 16:23:45 2015] [error] [client 10.21.9.246] Options FollowSymLinks or SymLinksIfOwnerMatch is off which implies that RewriteRule directive is forbidden: /usr/local/nagiosxi/html/
[Wed Nov 25 16:23:46 2015] [error] [client 10.21.9.246] File does not exist: /var/www/html/favicon.ico, referer: https://nagiosxi.lifelock.com/nagiosxi/
[Wed Nov 25 16:23:48 2015] [error] [client 10.21.9.246] Options FollowSymLinks or SymLinksIfOwnerMatch is off which implies that RewriteRule directive is forbidden: /usr/local/nagiosxi/html/
[Wed Nov 25 16:23:57 2015] [error] [client 10.31.11.21] Options FollowSymLinks or SymLinksIfOwnerMatch is off which implies that RewriteRule directive is forbidden: /usr/local/nagiosxi/html/login.php
[Wed Nov 25 16:24:03 2015] [error] [client 127.0.0.1] Options FollowSymLinks or SymLinksIfOwnerMatch is off which implies that RewriteRule directive is forbidden: /usr/local/nagiosxi/html/backend/
[Wed Nov 25 16:24:23 2015] [error] [client 127.0.0.1] Options FollowSymLinks or SymLinksIfOwnerMatch is off which implies that RewriteRule directive is forbidden: /usr/local/nagiosxi/html/backend/
[Wed Nov 25 16:24:44 2015] [error] [client 127.0.0.1] Options FollowSymLinks or SymLinksIfOwnerMatch is off which implies that RewriteRule directive is forbidden: /usr/local/nagiosxi/html/backend/
[Wed Nov 25 16:24:45 2015] [error] [client 10.21.9.246] Options FollowSymLinks or SymLinksIfOwnerMatch is off which implies that RewriteRule directive is forbidden: /usr/local/nagiosxi/html/
[Wed Nov 25 16:24:54 2015] [error] [client 10.31.11.21] Options FollowSymLinks or SymLinksIfOwnerMatch is off which implies that RewriteRule directive is forbidden: /usr/local/nagiosxi/html/login.php

[Box293]

Make sure that you go to Admin > System Settings and change your Program URL (and External URL if you have it set) from http:// to https:// then click the Update Settings button.

These do not work. i get errors trying to browser to nagiosxi.lifelock.com/nagiosxi/ after this.

What is in the "Program URL" and "External URL" fields?

[doneil326]

programurl is https://nagiosxi.lifelock.com/nagiosxi/

externalurl is blank as we are not using it this externally.

[Box293]

Does nagiosxi.lifelock.com resolve to an internal IP address or an external IP address?

What does this report when executed on the XI server:

Code: Select all

nslookup nagiosxi.lifelock.com

[doneil326]

it resolves to an internal ip address

[lmiltchev]

Can you run the following command and show the output?

Code: Select all

cat /etc/httpd/conf.d/welcome.conf

[doneil326]

#
# This configuration file enables the default "Welcome"
# page if there is no default index page present for
# the root URL. To disable the Welcome page, comment
# out all the lines below.
#
<LocationMatch "^/+$">
Options -Indexes
ErrorDocument 403 /error/noindex.html
</LocationMatch>