Install succeeded.. but not really

[gwakem]

I have installed network analyzer (2.2.0, grabbed via wget http://assets.nagios.com/downloads/nagi ... est.tar.gz) and running the ./fullinstall seemed to work correctly with no blatant errors. However, when I go to http://x.x.x.x/nagiosna/, I get a 403 forbidden: Forbidden You don't have permission to access /nagiosna/ on this server.

Checking the logs I see this: [Thu Mar 03 14:45:47.787122 2016] [core:error] [pid 19183] (13)Permission denied: [client x.x.x.x:42810] AH00035: access to /nagiosna/ denied (filesystem path '/var/www/html/nagiosna/www') because search permissions are missing on a component of the path.

Since this was entirely configured by the fullinstall script, I'm not sure what happened there. Any ideas? Alternatively, anything I can provide to help troubleshooting?

[tgriep]

What Operating system and version did you install NA on?
Can you login to the server, run the following commands and post the output?

Code: Select all

ps -ef
chage -l nna
grep nn /etc/group
 ls -l /var/www/html/nagiosna/www

Can you post the install.log file from the folder you ran the fullinstall from?

[gwakem]

Sorry, I should have included that. Long day! This is a Red Hat 7.2 system. I have attached the output to all commands and the log requested below.

[lmiltchev]

Run the following command:

Code: Select all

chmod go+r /var/www/html/nagiosna/www/index.php

then try to log in the web UI again.

What is the output of the following commands?

Code: Select all

sestatus
service iptables status

[gwakem]

10:40:29 [root@netanalyzer www]# sestatus
SELinux status: disabled
10:40:53 [root@netanalyzer www]# service iptables status
Redirecting to /bin/systemctl status iptables.service
? iptables.service
Loaded: masked (/dev/null)
Active: inactive (dead)

I still get the Forbidden message. I was looking at this last night and I noticed the permissions on the folders were all 700.

[ssax]

While not a problem yet, let's fix the password expiration:

Code: Select all

passwd nna
passwd -d nna
chage -I -1 -m 0 -M 99999 -E -1 nna

Then run this command and attach the resulting /tmp/nnaperms.txt file:

Code: Select all

getfacl -R nagiosna /var/www/html/nagiosna > /tmp/nnaperms.txt

Also, please zip up and attach your /etc/httpd/conf/httpd.conf file and your /etc/httpd/conf.d/nagiosna.conf file so that we can review them.

Thank you

[gwakem]

The password expiration has been updated, and I have attached the requested files. Thanks!

[ssax]

Please unzip the attached file and put it in your /tmp directory, then run these commands:

Code: Select all

cd /
setfacl --restore=/tmp/pristine_nna_perms.txt
service httpd restart

Then see if it's still broken for you and let us know the results.

pristine_nna_perms.zip

[gwakem]

That did it! Thanks for your help. This ticket is good to close if needed.

[lmiltchev]

That did it! Thanks for your help. This ticket is good to close if needed.

Great! I am marking this topic as "resolved".