Unable to Acknowledge Services

[chicjo01]

I have AD/LDAP users of different permission levels unable to acknowledge services or add comments. Using a local user of the same permission level does work correctly. Can you shed some light on this?

User 1: AD/LDAP Admin
User 2: AD / LDAP User

Capture.PNG

When the users try to acknowledge service, it does not take affect. I have checked the logs for the event, but unable to find the event.

Note: I am using an Offloaded DB server

Logs I checked:
/var/log/httpd/error.log
/var/log/httpd/ssl_error.log
/usr/local/nagios/var/nagios.log
/var/log/mariadb/mariadb.log
/var/log/cron

[hsmith]

What version of XI is this?

[chicjo01]

Version: 5.2.7

[rkennedy]

Are there any 'special' characters in the LDAP username?

Additionally, can you show the rest of the screen for the user in question? I had an issue similar to this, and it was because the capitalizations / lowercases didn't line up properly in the cgi.cfg. Can you also post this file?

[chicjo01]

I do not have permission from the User 2 to display the information. I am User 1 and I have provided the information below.

Capture.PNG

[rkennedy]

Can you also post the cgi.cfg file? We'll need to see how that lines up too.

[chicjo01]

Does the apply configuration add the users into the cgi.cfg, based on the permission levels? Which specific permission level provide the ability to acknowledge, schedule downtime, unacknowledge, add comments, etc??

# MODIFIED
default_statusmap_layout=6


# UNMODIFIED
action_url_target=_blank
authorized_for_all_host_commands=nagiosadmin,nagiosadmin,devops,ChicJo01,SandCr01,weinerdd,HodgWa01,bradyhx,AronGl01,BellinMR,FabiSa01,ChicJo01,SandCr01,weinerdd,HodgWa01,bradyhx,AronGl01
authorized_for_all_hosts=nagiosadmin,nagiosadmin,devops,ChicJo01,SandCr01,weinerdd,HodgWa01,bradyhx,AronGl01,BellinMR,FabiSa01,ChicJo01,readonly,SandCr01,weinerdd,HodgWa01,bradyhx,AronGl01
authorized_for_all_service_commands=nagiosadmin,nagiosadmin,devops,ChicJo01,SandCr01,weinerdd,HodgWa01,bradyhx,AronGl01,BellinMR,FabiSa01,ChicJo01,SandCr01,weinerdd,HodgWa01,bradyhx,AronGl01
authorized_for_all_services=nagiosadmin,nagiosadmin,devops,ChicJo01,SandCr01,weinerdd,HodgWa01,bradyhx,AronGl01,BellinMR,FabiSa01,ChicJo01,readonly,SandCr01,weinerdd,HodgWa01,bradyhx,AronGl01
authorized_for_configuration_information=nagiosadmin,nagiosadmin,devops,ChicJo01,SandCr01,weinerdd,HodgWa01,bradyhx,AronGl01,BellinMR,FabiSa01,ChicJo01,readonly,SandCr01,weinerdd,HodgWa01,bradyhx,AronGl01
authorized_for_system_commands=nagiosadmin,nagiosadmin,devops,ChicJo01,SandCr01,weinerdd,HodgWa01,bradyhx,AronGl01,ChicJo01,SandCr01,weinerdd,HodgWa01,bradyhx,AronGl01
authorized_for_system_information=nagiosadmin,nagiosadmin,devops,ChicJo01,SandCr01,weinerdd,HodgWa01,bradyhx,AronGl01,ChicJo01,SandCr01,weinerdd,HodgWa01,bradyhx,AronGl01
default_statuswrl_layout=4
escape_html_tags=1
lock_author_names=1
main_config_file=/usr/local/nagios/etc/nagios.cfg
notes_url_target=_blank
physical_html_path=/usr/local/nagios/share
ping_syntax=/bin/ping -n -U -c 5 $HOSTADDRESS$
refresh_rate=90
show_context_help=0
url_html_path=/nagios
use_authentication=1
use_pending_states=1
use_ssl_authentication=0
authorized_for_read_only=readonly

[lmiltchev]

Did you modify the cfg.cfg manually?

When users are added, any capital letters should be changed to lowercase. I added a "ChicJo01" user to my test XI box, and checked the cgi.cfg file. I see "chicjo01" added to all "authorized_for_" lines (lowercase), NOT "ChicJo01".

Try changing "ChicJo01" to "chicjo01", save, exit, and restart nagios & apache:

Code: Select all

service httpd restart
service nagios restart

Did this help?

[chicjo01]

That corrected the issue. Thank you. I will switch the users having issue over to lowercase based on the username. This issue can be closed.

[lmiltchev]

Great! I am glad I could help!

I am locking the thread.