Automatic login fails with "invalid username or password"

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
Locked
andrewmeneguz
Posts: 7
Joined: Tue Oct 14, 2014 11:29 pm

Automatic login fails with "invalid username or password"

Post by andrewmeneguz »

Hi All,

I've just upgraded to version 5.2.7 today and afterwards found that the automatic login of my read-only user account is failing.

I tried resetting the password, setting a different user account to automatically login but both return the same results: Invalid username or password.

Both the Admin and User accounts work fine when I login with the credentials normally.

Appreciate any help you can provide.
User avatar
Box293
Too Basu
Posts: 5126
Joined: Sun Feb 07, 2010 10:55 pm
Location: Deniliquin, Australia
Contact:

Re: Automatic login fails with "invalid username or password

Post by Box293 »

Are you using https:// in your URL?

Run this command in an SSH session:

Code: Select all

tail -f /var/log/httpd/*
Try and auto logon
Do you get any errors in the SSH session?
As of May 25th, 2018, all communications with Nagios Enterprises and its employees are covered under our new Privacy Policy.
andrewmeneguz
Posts: 7
Joined: Tue Oct 14, 2014 11:29 pm

Re: Automatic login fails with "invalid username or password

Post by andrewmeneguz »

Hey, thanks for the response. it's just regular http.

Here's the output from the command you provided - any ideas? :o


Code: Select all

==> /var/log/httpd/access_log-20160501 <==
::1 - - [01/May/2016:03:24:42 +0800] "POST /nagiosxi/backend/ HTTP/1.1" 200 817 "-" "BinGet/1.00.A (RemovedURL:www.bin-co.com/php/scripts/load/)"
::1 - - [01/May/2016:03:25:01 +0800] "POST /nagiosxi/backend/ HTTP/1.1" 200 817 "-" "BinGet/1.00.A (RemovedURL:www.bin-co.com/php/scripts/load/)"
::1 - - [01/May/2016:03:25:21 +0800] "POST /nagiosxi/backend/ HTTP/1.1" 200 817 "-" "BinGet/1.00.A (RemovedURL:www.bin-co.com/php/scripts/load/)"
::1 - - [01/May/2016:03:25:41 +0800] "POST /nagiosxi/backend/ HTTP/1.1" 200 817 "-" "BinGet/1.00.A (RemovedURL:www.bin-co.com/php/scripts/load/)"
::1 - - [01/May/2016:03:26:01 +0800] "POST /nagiosxi/backend/ HTTP/1.1" 200 817 "-" "BinGet/1.00.A (RemovedURL:www.bin-co.com/php/scripts/load/)"
::1 - - [01/May/2016:03:26:21 +0800] "POST /nagiosxi/backend/ HTTP/1.1" 200 817 "-" "BinGet/1.00.A (RemovedURL:www.bin-co.com/php/scripts/load/)"
::1 - - [01/May/2016:03:26:41 +0800] "POST /nagiosxi/backend/ HTTP/1.1" 200 817 "-" "BinGet/1.00.A (RemovedURL:www.bin-co.com/php/scripts/load/)"
::1 - - [01/May/2016:03:27:01 +0800] "POST /nagiosxi/backend/ HTTP/1.1" 200 817 "-" "BinGet/1.00.A (RemovedURL:www.bin-co.com/php/scripts/load/)"
::1 - - [01/May/2016:03:27:22 +0800] "POST /nagiosxi/backend/ HTTP/1.1" 200 817 "-" "BinGet/1.00.A (RemovedURL:www.bin-co.com/php/scripts/load/)"
::1 - - [01/May/2016:03:27:42 +0800] "POST /nagiosxi/backend/ HTTP/1.1" 200 817 "-" "BinGet/1.00.A (RemovedURL:www.bin-co.com/php/scripts/load/)"

==> /var/log/httpd/access_log-20160508 <==
10.1.1.149 - - [08/May/2016:03:32:11 +0800] "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_pagetop_alert_content_html%22%2C%22args%22%3A%22%22%7D&nsp=6c96601669fd695da62580cc127c8495 HTTP/1.1" 200 - "RemovedURL:srvnagios/nagiosxi/" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
10.1.1.149 - - [08/May/2016:03:32:12 +0800] "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_minemap_dashlet_html%22%2C%22args%22%3A%7B%22nsp%22%3A%225e9490c3b97b64cbaf5a9bee4048b627%22%2C%22iframe_width%22%3A%22725%22%2C%22iframe_height%22%3A%22230%22%7D%7D&nsp=6c96601669fd695da62580cc127c8495 HTTP/1.1" 200 875072 "RemovedURL:srvnagios/nagiosxi//includes/page-home-main.php?&=" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
::1 - - [08/May/2016:03:32:22 +0800] "POST /nagiosxi/backend/ HTTP/1.1" 200 815 "-" "BinGet/1.00.A (RemovedURL:www.bin-co.com/php/scripts/load/)"
10.1.1.149 - - [08/May/2016:03:32:41 +0800] "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_pagetop_alert_content_html%22%2C%22args%22%3A%22%22%7D&nsp=6c96601669fd695da62580cc127c8495 HTTP/1.1" 200 - "RemovedURL:srvnagios/nagiosxi/" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
::1 - - [08/May/2016:03:32:42 +0800] "POST /nagiosxi/backend/ HTTP/1.1" 200 815 "-" "BinGet/1.00.A (RemovedURL:www.bin-co.com/php/scripts/load/)"
10.1.1.149 - - [08/May/2016:03:32:42 +0800] "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_host_status_summary_html%22%2C%22args%22%3A%7B%22nsp%22%3A%224a294cd5ee4205c38476b00699a4c80d%22%2C%22iframe_width%22%3A%22214%22%2C%22iframe_height%22%3A%22108%22%7D%7D&nsp=6c96601669fd695da62580cc127c8495 HTTP/1.1" 200 1745 "RemovedURL:srvnagios/nagiosxi//includes/page-home-main.php?&=" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
10.1.1.149 - - [08/May/2016:03:32:42 +0800] "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_service_status_summary_html%22%2C%22args%22%3A%7B%22nsp%22%3A%224a294cd5ee4205c38476b00699a4c80d%22%2C%22iframe_width%22%3A%22250%22%2C%22iframe_height%22%3A%22105%22%7D%7D&nsp=6c96601669fd695da62580cc127c8495 HTTP/1.1" 200 2041 "RemovedURL:srvnagios/nagiosxi//includes/page-home-main.php?&=" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
10.1.1.149 - - [08/May/2016:03:32:42 +0800] "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_hostgroup_status_summary_html%22%2C%22args%22%3A%7B%22nsp%22%3A%22f43f98820bcef15cccaeebe16e4340a9%22%2C%22iframe_width%22%3A%22574%22%2C%22iframe_height%22%3A%22281%22%7D%7D&nsp=6c96601669fd695da62580cc127c8495 HTTP/1.1" 200 6490 "RemovedURL:srvnagios/nagiosxi//includes/page-home-main.php?&=" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
10.1.1.149 - - [08/May/2016:03:32:42 +0800] "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_minemap_dashlet_html%22%2C%22args%22%3A%7B%22nsp%22%3A%225e9490c3b97b64cbaf5a9bee4048b627%22%2C%22iframe_width%22%3A%22725%22%2C%22iframe_height%22%3A%22230%22%7D%7D&nsp=6c96601669fd695da62580cc127c8495 HTTP/1.1" 200 875026 "RemovedURL:srvnagios/nagiosxi//includes/page-home-main.php?&=" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
::1 - - [08/May/2016:03:33:01 +0800] "POST /nagiosxi/backend/ HTTP/1.1" 200 815 "-" "BinGet/1.00.A (RemovedURL:www.bin-co.com/php/scripts/load/)"

==> /var/log/httpd/access_log-20160515 <==
::1 - - [15/May/2016:03:16:26 +0800] "POST /nagiosxi/backend/ HTTP/1.1" 200 1593 "-" "BinGet/1.00.A (RemovedURL:www.bin-co.com/php/scripts/load/)"
10.1.1.149 - - [15/May/2016:03:16:26 +0800] "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_pagetop_alert_content_html%22%2C%22args%22%3A%22%22%7D&nsp=4aba117868bb19dc62bdb5a284d6b0af HTTP/1.1" 200 1107 "RemovedURL:srvnagios/nagiosxi/" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
::1 - - [15/May/2016:03:16:26 +0800] "POST /nagiosxi/backend/ HTTP/1.1" 200 1593 "-" "BinGet/1.00.A (RemovedURL:www.bin-co.com/php/scripts/load/)"
10.1.1.149 - - [15/May/2016:03:16:26 +0800] "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_tray_alert_html%22%2C%22args%22%3A%22%22%7D&nsp=4aba117868bb19dc62bdb5a284d6b0af HTTP/1.1" 200 593 "RemovedURL:srvnagios/nagiosxi/" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
::1 - - [15/May/2016:03:16:42 +0800] "POST /nagiosxi/backend/ HTTP/1.1" 200 815 "-" "BinGet/1.00.A (RemovedURL:www.bin-co.com/php/scripts/load/)"
::1 - - [15/May/2016:03:16:56 +0800] "POST /nagiosxi/backend/ HTTP/1.1" 200 1593 "-" "BinGet/1.00.A (RemovedURL:www.bin-co.com/php/scripts/load/)"
10.1.1.149 - - [15/May/2016:03:16:56 +0800] "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_pagetop_alert_content_html%22%2C%22args%22%3A%22%22%7D&nsp=4aba117868bb19dc62bdb5a284d6b0af HTTP/1.1" 200 1107 "RemovedURL:srvnagios/nagiosxi/" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
10.1.1.149 - - [15/May/2016:03:16:56 +0800] "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_tray_alert_html%22%2C%22args%22%3A%22%22%7D&nsp=4aba117868bb19dc62bdb5a284d6b0af HTTP/1.1" 200 593 "RemovedURL:srvnagios/nagiosxi/" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
::1 - - [15/May/2016:03:16:56 +0800] "POST /nagiosxi/backend/ HTTP/1.1" 200 1593 "-" "BinGet/1.00.A (RemovedURL:www.bin-co.com/php/scripts/load/)"
10.1.1.149 - - [15/May/2016:03:16:56 +0800] "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_latestalerts_dashlet_html%22%2C%22args%22%3A%7B%22type%22%3A%22%22%2C%22host%22%3A%22%22%2C%22hostgroup%22%3A%22%22%2C%22servicegroup%22%3A%22%22%2C%22maxitems%22%3A%22200%22%2C%22nsp%22%3A%22b22360f85f607b93d4106690f17001c2%22%2C%22iframe_width%22%3A%221078%22%2C%22iframe_height%22%3A%22257%22%7D%7D&nsp=4aba117868bb19dc62bdb5a284d6b0af HTTP/1.1" 200 5616 "RemovedURL:srvnagios/nagiosxi//includes/page-home-main.php?&=" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"

==> /var/log/httpd/error_log <==
[Sun May 15 03:17:02 2016] [notice] Digest: generating secret for digest authentication ...
[Sun May 15 03:17:02 2016] [notice] Digest: done
[Sun May 15 03:17:02 2016] [notice] Apache/2.2.15 (Unix) DAV/2 PHP/5.3.3 mod_ssl/2.2.15 OpenSSL/1.0.1e-fips configured -- resuming normal operations
[Mon May 16 08:42:44 2016] [error] [client 10.1.40.38] PHP Notice:  Undefined offset: 1000 in /usr/local/nagiosxi/html/includes/components/helpsystem/helpsystem.inc.php on line 252
[Mon May 16 08:42:46 2016] [error] [client 10.1.40.38] PHP Notice:  Undefined offset: 1000 in /usr/local/nagiosxi/html/includes/components/helpsystem/helpsystem.inc.php on line 252, referer: RemovedURL:srvnagios/nagiosxi/index.php?
[Mon May 16 09:26:18 2016] [error] [client 10.1.1.149] PHP Notice:  Undefined offset: 1000 in /usr/local/nagiosxi/html/includes/components/helpsystem/helpsystem.inc.php on line 252, referer: RemovedURL:srvnagios/nagiosxi/login.php
[Mon May 16 09:26:19 2016] [error] [client 10.1.1.149] PHP Notice:  Undefined offset: 1000 in /usr/local/nagiosxi/html/includes/components/helpsystem/helpsystem.inc.php on line 252, referer: RemovedURL:srvnagios/nagiosxi/index.php

==> /var/log/httpd/error_log-20160424 <==
[Sun Apr 17 03:30:02 2016] [notice] Digest: generating secret for digest authentication ...
[Sun Apr 17 03:30:02 2016] [notice] Digest: done
[Sun Apr 17 03:30:02 2016] [notice] Apache/2.2.15 (Unix) DAV/2 PHP/5.3.3 mod_ssl/2.2.15 OpenSSL/1.0.1e-fips configured -- resuming normal operations
[Wed Apr 20 18:14:39 2016] [error] [client 10.1.1.227] File does not exist: /var/www/html/browserconfig.xml
zend_mm_heap corrupted
[Sun Apr 24 03:33:02 2016] [notice] SIGHUP received.  Attempting to restart

==> /var/log/httpd/error_log-20160501 <==
[Sun Apr 24 03:33:02 2016] [notice] Digest: generating secret for digest authentication ...
[Sun Apr 24 03:33:02 2016] [notice] Digest: done
[Sun Apr 24 03:33:02 2016] [notice] Apache/2.2.15 (Unix) DAV/2 PHP/5.3.3 mod_ssl/2.2.15 OpenSSL/1.0.1e-fips configured -- resuming normal operations
[Sun May 01 03:28:01 2016] [notice] SIGHUP received.  Attempting to restart

==> /var/log/httpd/error_log-20160508 <==
[Thu May 05 08:36:21 2016] [error] [client 10.1.1.103] PHP Notice:  Undefined variable: ac_needed_js_inject in /usr/local/nagiosxi/html/includes/components/ccm/page_templates/ccm_table.php on line 176, referer: RemovedURL:srvnagios/nagiosxi/includes/components/ccm/index.php
[Thu May 05 08:36:21 2016] [error] [client 10.1.1.103] PHP Notice:  Undefined variable: sync_table_status in /usr/local/nagiosxi/html/includes/components/ccm/page_templates/ccm_table.php on line 196, referer: RemovedURL:srvnagios/nagiosxi/includes/components/ccm/index.php
[Thu May 05 08:36:23 2016] [error] [client 10.1.1.103] PHP Notice:  Undefined index: template_name in /usr/local/nagiosxi/html/includes/components/ccm/page_templates/common_settings.php on line 53, referer: RemovedURL:srvnagios/nagiosxi/includes/components/ccm/index.php
[Thu May 05 08:36:31 2016] [error] [client ::1] PHP Notice:  Undefined index: language in /usr/local/nagiosxi/html/includes/components/ccm/includes/common_functions.inc.php on line 710
[Thu May 05 08:36:31 2016] [error] [client ::1] PHP Notice:  Undefined index: language in /usr/local/nagiosxi/html/includes/components/ccm/includes/common_functions.inc.php on line 711
[Thu May 05 08:51:13 2016] [error] [client ::1] PHP Notice:  Undefined index: language in /usr/local/nagiosxi/html/includes/components/ccm/includes/common_functions.inc.php on line 710
[Thu May 05 08:51:13 2016] [error] [client ::1] PHP Notice:  Undefined index: language in /usr/local/nagiosxi/html/includes/components/ccm/includes/common_functions.inc.php on line 711
[Thu May 05 08:51:14 2016] [error] [client ::1] PHP Notice:  Undefined index: language in /usr/local/nagiosxi/html/includes/components/ccm/includes/common_functions.inc.php on line 710
[Thu May 05 08:51:14 2016] [error] [client ::1] PHP Notice:  Undefined index: language in /usr/local/nagiosxi/html/includes/components/ccm/includes/common_functions.inc.php on line 711
[Sun May 08 03:33:01 2016] [notice] SIGHUP received.  Attempting to restart

==> /var/log/httpd/error_log-20160515 <==
[Fri May 13 11:27:57 2016] [error] [client 10.1.1.149] PHP Notice:  Undefined offset: 1000 in /usr/local/nagiosxi/html/includes/components/helpsystem/helpsystem.inc.php on line 252, referer: RemovedURL:srvnagios/nagiosxi/includes/components/nocscreen/noc.php
[Fri May 13 11:28:10 2016] [error] [client 10.1.1.149] PHP Notice:  Undefined offset: 1000 in /usr/local/nagiosxi/html/includes/components/helpsystem/helpsystem.inc.php on line 252, referer: RemovedURL:srvnagios/nagiosxi/includes/components/nocscreen/noc.php
[Fri May 13 11:28:33 2016] [error] [client 10.1.1.149] PHP Notice:  Undefined offset: 1000 in /usr/local/nagiosxi/html/includes/components/helpsystem/helpsystem.inc.php on line 252, referer: RemovedURL:srvnagios/nagiosxi/includes/components/nocscreen/noc.php?host=&hostgroup=&servicegroup=&state=&reporttimesubmitbutton=Update
[Fri May 13 11:43:40 2016] [error] [client 10.1.1.149] PHP Notice:  Undefined offset: 1000 in /usr/local/nagiosxi/html/includes/components/helpsystem/helpsystem.inc.php on line 252, referer: RemovedURL:srvnagios/nagiosxi/includes/components/nocscreen/noc.php
[Fri May 13 11:45:28 2016] [error] [client 10.1.1.149] PHP Notice:  Undefined offset: 1000 in /usr/local/nagiosxi/html/includes/components/helpsystem/helpsystem.inc.php on line 252, referer: RemovedURL:srvnagios/nagiosxi/
[Fri May 13 11:45:29 2016] [error] [client 10.1.1.149] PHP Notice:  Undefined offset: 1000 in /usr/local/nagiosxi/html/includes/components/helpsystem/helpsystem.inc.php on line 252, referer: RemovedURL:srvnagios/nagiosxi/
[Fri May 13 16:49:05 2016] [error] [client 10.1.1.103] PHP Notice:  Undefined offset: 1000 in /usr/local/nagiosxi/html/includes/components/helpsystem/helpsystem.inc.php on line 252
[Fri May 13 16:49:06 2016] [error] [client 10.1.1.103] PHP Notice:  Undefined offset: 1000 in /usr/local/nagiosxi/html/includes/components/helpsystem/helpsystem.inc.php on line 252, referer: RemovedURL:srvnagios/nagiosxi/index.php?
zend_mm_heap corrupted
[Sun May 15 03:17:02 2016] [notice] SIGHUP received.  Attempting to restart

==> /var/log/httpd/ssl_access_log <==

==> /var/log/httpd/ssl_access_log-20160202 <==
10.1.1.45 - - [01/Feb/2016:22:39:57 +0800] "GET /nagiosxi/moin_static183/classic/css/common.css HTTP/1.1" 404 338
10.1.1.45 - - [01/Feb/2016:22:39:57 +0800] "GET /nagiosxi/moin_static12/classic/css/print.css HTTP/1.1" 404 336
10.1.1.45 - - [01/Feb/2016:22:39:57 +0800] "GET /nagiosxi/moin_static130/modern/css/screen.css HTTP/1.1" 404 337
10.1.1.45 - - [01/Feb/2016:22:39:57 +0800] "GET /nagiosxi/moin_static193/modernized/css/SlideShow.css HTTP/1.1" 404 344
10.1.1.45 - - [01/Feb/2016:22:39:57 +0800] "GET /nagiosxi/moin_static182/modern/css/print.css HTTP/1.1" 404 336
10.1.1.45 - - [01/Feb/2016:22:40:34 +0800] "GET / HTTP/1.0" 200 2999
10.1.1.45 - - [01/Feb/2016:22:40:34 +0800] "GET / HTTP/1.0" 200 2999
10.1.1.45 - - [01/Feb/2016:22:40:35 +0800] "GET /\"><script>alert(document.domain)</script>.html HTTP/1.1" 404 340
10.1.1.45 - - [01/Feb/2016:22:40:35 +0800] "GET /\"><script>alert(document.domain)</script>.html HTTP/1.1" 404 340
10.1.1.45 - - [01/Feb/2016:22:52:02 +0800] "GET / HTTP/1.1" 200 2999

==> /var/log/httpd/ssl_access_log-20160224 <==
10.1.1.103 - - [23/Feb/2016:15:54:42 +0800] "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_pagetop_alert_content_html%22%2C%22args%22%3A%22%22%7D&nsp=aefb5587a889ac3ff1513a64062e1099 HTTP/1.1" 200 -
10.1.1.103 - - [23/Feb/2016:15:54:42 +0800] "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_latestalerts_dashlet_html%22%2C%22args%22%3A%7B%22nsp%22%3A%225e9490c3b97b64cbaf5a9bee4048b627%22%2C%22iframe_width%22%3A%22827%22%2C%22iframe_height%22%3A%22559%22%7D%7D&nsp=aefb5587a889ac3ff1513a64062e1099 HTTP/1.1" 200 12481
10.1.1.103 - - [23/Feb/2016:15:54:42 +0800] "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_minemap_dashlet_html%22%2C%22args%22%3A%7B%22nsp%22%3A%225e9490c3b97b64cbaf5a9bee4048b627%22%2C%22iframe_width%22%3A%22725%22%2C%22iframe_height%22%3A%22230%22%7D%7D&nsp=aefb5587a889ac3ff1513a64062e1099 HTTP/1.1" 200 893399
10.1.1.103 - - [23/Feb/2016:15:55:13 +0800] "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_host_status_summary_html%22%2C%22args%22%3A%7B%22nsp%22%3A%224a294cd5ee4205c38476b00699a4c80d%22%2C%22iframe_width%22%3A%22214%22%2C%22iframe_height%22%3A%22108%22%7D%7D&nsp=aefb5587a889ac3ff1513a64062e1099 HTTP/1.1" 200 1752
10.1.1.103 - - [23/Feb/2016:15:55:13 +0800] "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_pagetop_alert_content_html%22%2C%22args%22%3A%22%22%7D&nsp=aefb5587a889ac3ff1513a64062e1099 HTTP/1.1" 200 -
10.1.1.103 - - [23/Feb/2016:15:55:13 +0800] "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_service_status_summary_html%22%2C%22args%22%3A%7B%22nsp%22%3A%224a294cd5ee4205c38476b00699a4c80d%22%2C%22iframe_width%22%3A%22250%22%2C%22iframe_height%22%3A%22105%22%7D%7D&nsp=aefb5587a889ac3ff1513a64062e1099 HTTP/1.1" 200 2049
10.1.1.103 - - [23/Feb/2016:15:55:13 +0800] "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_hostgroup_status_summary_html%22%2C%22args%22%3A%7B%22nsp%22%3A%22f43f98820bcef15cccaeebe16e4340a9%22%2C%22iframe_width%22%3A%22574%22%2C%22iframe_height%22%3A%22281%22%7D%7D&nsp=aefb5587a889ac3ff1513a64062e1099 HTTP/1.1" 200 6877
10.1.1.103 - - [23/Feb/2016:15:55:13 +0800] "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_minemap_dashlet_html%22%2C%22args%22%3A%7B%22nsp%22%3A%225e9490c3b97b64cbaf5a9bee4048b627%22%2C%22iframe_width%22%3A%22725%22%2C%22iframe_height%22%3A%22230%22%7D%7D&nsp=aefb5587a889ac3ff1513a64062e1099 HTTP/1.1" 200 893413
10.1.1.103 - - [23/Feb/2016:15:55:42 +0800] "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_pagetop_alert_content_html%22%2C%22args%22%3A%22%22%7D&nsp=aefb5587a889ac3ff1513a64062e1099 HTTP/1.1" 200 -
10.1.1.103 - - [23/Feb/2016:15:55:42 +0800] "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_minemap_dashlet_html%22%2C%22args%22%3A%7B%22nsp%22%3A%225e9490c3b97b64cbaf5a9bee4048b627%22%2C%22iframe_width%22%3A%22725%22%2C%22iframe_height%22%3A%22230%22%7D%7D&nsp=aefb5587a889ac3ff1513a64062e1099 HTTP/1.1" 200 893429

==> /var/log/httpd/ssl_access_log-20160228 <==
10.1.1.103 - - [24/Feb/2016:14:23:36 +0800] "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_pagetop_alert_content_html%22%2C%22args%22%3A%22%22%7D&nsp=e7633ffba5b5f37e1b2761e88a5e063d HTTP/1.1" 200 -
10.1.1.103 - - [24/Feb/2016:14:23:36 +0800] "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_minemap_dashlet_html%22%2C%22args%22%3A%7B%22nsp%22%3A%225e9490c3b97b64cbaf5a9bee4048b627%22%2C%22iframe_width%22%3A%22725%22%2C%22iframe_height%22%3A%22230%22%7D%7D&nsp=e7633ffba5b5f37e1b2761e88a5e063d HTTP/1.1" 200 893464
10.1.1.103 - - [24/Feb/2016:14:24:06 +0800] "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_pagetop_alert_content_html%22%2C%22args%22%3A%22%22%7D&nsp=e7633ffba5b5f37e1b2761e88a5e063d HTTP/1.1" 200 -
10.1.1.103 - - [24/Feb/2016:14:24:06 +0800] "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_service_status_summary_html%22%2C%22args%22%3A%7B%22nsp%22%3A%224a294cd5ee4205c38476b00699a4c80d%22%2C%22iframe_width%22%3A%22250%22%2C%22iframe_height%22%3A%22105%22%7D%7D&nsp=e7633ffba5b5f37e1b2761e88a5e063d HTTP/1.1" 200 2049
10.1.1.103 - - [24/Feb/2016:14:24:06 +0800] "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_host_status_summary_html%22%2C%22args%22%3A%7B%22nsp%22%3A%224a294cd5ee4205c38476b00699a4c80d%22%2C%22iframe_width%22%3A%22214%22%2C%22iframe_height%22%3A%22108%22%7D%7D&nsp=e7633ffba5b5f37e1b2761e88a5e063d HTTP/1.1" 200 1752
10.1.1.103 - - [24/Feb/2016:14:24:06 +0800] "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_latestalerts_dashlet_html%22%2C%22args%22%3A%7B%22nsp%22%3A%225e9490c3b97b64cbaf5a9bee4048b627%22%2C%22iframe_width%22%3A%22827%22%2C%22iframe_height%22%3A%22559%22%7D%7D&nsp=e7633ffba5b5f37e1b2761e88a5e063d HTTP/1.1" 200 11894
10.1.1.103 - - [24/Feb/2016:14:24:06 +0800] "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_hostgroup_status_summary_html%22%2C%22args%22%3A%7B%22nsp%22%3A%22f43f98820bcef15cccaeebe16e4340a9%22%2C%22iframe_width%22%3A%22574%22%2C%22iframe_height%22%3A%22281%22%7D%7D&nsp=e7633ffba5b5f37e1b2761e88a5e063d HTTP/1.1" 200 6877
10.1.1.103 - - [24/Feb/2016:14:24:06 +0800] "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_minemap_dashlet_html%22%2C%22args%22%3A%7B%22nsp%22%3A%225e9490c3b97b64cbaf5a9bee4048b627%22%2C%22iframe_width%22%3A%22725%22%2C%22iframe_height%22%3A%22230%22%7D%7D&nsp=e7633ffba5b5f37e1b2761e88a5e063d HTTP/1.1" 200 893462
10.1.1.103 - - [24/Feb/2016:14:24:36 +0800] "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_pagetop_alert_content_html%22%2C%22args%22%3A%22%22%7D&nsp=e7633ffba5b5f37e1b2761e88a5e063d HTTP/1.1" 200 -
10.1.1.103 - - [24/Feb/2016:14:24:36 +0800] "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_minemap_dashlet_html%22%2C%22args%22%3A%7B%22nsp%22%3A%225e9490c3b97b64cbaf5a9bee4048b627%22%2C%22iframe_width%22%3A%22725%22%2C%22iframe_height%22%3A%22230%22%7D%7D&nsp=e7633ffba5b5f37e1b2761e88a5e063d HTTP/1.1" 200 893522

==> /var/log/httpd/ssl_access_log-20160306 <==
10.1.1.45 - - [01/Mar/2016:22:07:21 +0800] "POST /wp-content/plugins/simple-ads-manager/sam-ajax-admin.php HTTP/1.1" 404 348
10.1.1.45 - - [01/Mar/2016:22:07:21 +0800] "GET /wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.php HTTP/1.1" 404 315
10.1.1.45 - - [01/Mar/2016:22:07:21 +0800] "GET /wp-content/plugins/work-the-flow-file-upload/public/assets/jQuery-File-Upload-9.5.0/server/php/index.php HTTP/1.1" 404 396
10.1.1.45 - - [01/Mar/2016:22:07:21 +0800] "GET /documents.html HTTP/1.1" 404 306
10.1.1.45 - - [01/Mar/2016:22:07:21 +0800] "GET /wp-content/plugins/aviary-image-editor-add-on-for-gravity-forms/readme.txt HTTP/1.1" 404 366
10.1.1.45 - - [01/Mar/2016:22:07:55 +0800] "GET / HTTP/1.0" 200 2999
10.1.1.45 - - [01/Mar/2016:22:07:55 +0800] "GET / HTTP/1.0" 200 2999
10.1.1.45 - - [01/Mar/2016:22:07:55 +0800] "GET /\"><script>alert(document.domain)</script>.html HTTP/1.1" 404 340
10.1.1.45 - - [01/Mar/2016:22:07:55 +0800] "GET /\"><script>alert(document.domain)</script>.html HTTP/1.1" 404 340
10.1.1.45 - - [01/Mar/2016:22:19:09 +0800] "GET / HTTP/1.1" 200 2999

==> /var/log/httpd/ssl_error_log <==
[Sun May 15 03:17:02 2016] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)

==> /var/log/httpd/ssl_error_log-20160424 <==
[Sun Apr 17 03:30:02 2016] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)

==> /var/log/httpd/ssl_error_log-20160501 <==
[Sun Apr 24 03:33:02 2016] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)

==> /var/log/httpd/ssl_error_log-20160508 <==
[Sun May 01 03:28:01 2016] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)

==> /var/log/httpd/ssl_error_log-20160515 <==
[Sun May 08 03:33:01 2016] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 13 08:25:28 2016] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 13 08:25:29 2016] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 13 08:33:11 2016] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 13 08:33:11 2016] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 13 08:39:51 2016] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 13 08:39:51 2016] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 13 09:03:08 2016] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 13 09:03:10 2016] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)

==> /var/log/httpd/ssl_request_log <==

==> /var/log/httpd/ssl_request_log-20160202 <==
[01/Feb/2016:22:39:57 +0800] 10.1.1.45 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /nagiosxi/moin_static183/classic/css/common.css HTTP/1.1" 338
[01/Feb/2016:22:39:57 +0800] 10.1.1.45 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /nagiosxi/moin_static12/classic/css/print.css HTTP/1.1" 336
[01/Feb/2016:22:39:57 +0800] 10.1.1.45 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /nagiosxi/moin_static130/modern/css/screen.css HTTP/1.1" 337
[01/Feb/2016:22:39:57 +0800] 10.1.1.45 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /nagiosxi/moin_static193/modernized/css/SlideShow.css HTTP/1.1" 344
[01/Feb/2016:22:39:57 +0800] 10.1.1.45 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /nagiosxi/moin_static182/modern/css/print.css HTTP/1.1" 336
[01/Feb/2016:22:40:34 +0800] 10.1.1.45 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 2999
[01/Feb/2016:22:40:34 +0800] 10.1.1.45 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 2999
[01/Feb/2016:22:40:35 +0800] 10.1.1.45 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /\"><script>alert(document.domain)</script>.html HTTP/1.1" 340
[01/Feb/2016:22:40:35 +0800] 10.1.1.45 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /\"><script>alert(document.domain)</script>.html HTTP/1.1" 340
[01/Feb/2016:22:52:02 +0800] 10.1.1.45 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 2999

==> /var/log/httpd/ssl_request_log-20160224 <==
[23/Feb/2016:15:54:42 +0800] 10.1.1.103 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_pagetop_alert_content_html%22%2C%22args%22%3A%22%22%7D&nsp=aefb5587a889ac3ff1513a64062e1099 HTTP/1.1" -
[23/Feb/2016:15:54:42 +0800] 10.1.1.103 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_latestalerts_dashlet_html%22%2C%22args%22%3A%7B%22nsp%22%3A%225e9490c3b97b64cbaf5a9bee4048b627%22%2C%22iframe_width%22%3A%22827%22%2C%22iframe_height%22%3A%22559%22%7D%7D&nsp=aefb5587a889ac3ff1513a64062e1099 HTTP/1.1" 12481
[23/Feb/2016:15:54:42 +0800] 10.1.1.103 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_minemap_dashlet_html%22%2C%22args%22%3A%7B%22nsp%22%3A%225e9490c3b97b64cbaf5a9bee4048b627%22%2C%22iframe_width%22%3A%22725%22%2C%22iframe_height%22%3A%22230%22%7D%7D&nsp=aefb5587a889ac3ff1513a64062e1099 HTTP/1.1" 893399
[23/Feb/2016:15:55:13 +0800] 10.1.1.103 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_host_status_summary_html%22%2C%22args%22%3A%7B%22nsp%22%3A%224a294cd5ee4205c38476b00699a4c80d%22%2C%22iframe_width%22%3A%22214%22%2C%22iframe_height%22%3A%22108%22%7D%7D&nsp=aefb5587a889ac3ff1513a64062e1099 HTTP/1.1" 1752
[23/Feb/2016:15:55:13 +0800] 10.1.1.103 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_pagetop_alert_content_html%22%2C%22args%22%3A%22%22%7D&nsp=aefb5587a889ac3ff1513a64062e1099 HTTP/1.1" -
[23/Feb/2016:15:55:13 +0800] 10.1.1.103 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_service_status_summary_html%22%2C%22args%22%3A%7B%22nsp%22%3A%224a294cd5ee4205c38476b00699a4c80d%22%2C%22iframe_width%22%3A%22250%22%2C%22iframe_height%22%3A%22105%22%7D%7D&nsp=aefb5587a889ac3ff1513a64062e1099 HTTP/1.1" 2049
[23/Feb/2016:15:55:13 +0800] 10.1.1.103 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_hostgroup_status_summary_html%22%2C%22args%22%3A%7B%22nsp%22%3A%22f43f98820bcef15cccaeebe16e4340a9%22%2C%22iframe_width%22%3A%22574%22%2C%22iframe_height%22%3A%22281%22%7D%7D&nsp=aefb5587a889ac3ff1513a64062e1099 HTTP/1.1" 6877
[23/Feb/2016:15:55:13 +0800] 10.1.1.103 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_minemap_dashlet_html%22%2C%22args%22%3A%7B%22nsp%22%3A%225e9490c3b97b64cbaf5a9bee4048b627%22%2C%22iframe_width%22%3A%22725%22%2C%22iframe_height%22%3A%22230%22%7D%7D&nsp=aefb5587a889ac3ff1513a64062e1099 HTTP/1.1" 893413
[23/Feb/2016:15:55:42 +0800] 10.1.1.103 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_pagetop_alert_content_html%22%2C%22args%22%3A%22%22%7D&nsp=aefb5587a889ac3ff1513a64062e1099 HTTP/1.1" -
[23/Feb/2016:15:55:42 +0800] 10.1.1.103 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_minemap_dashlet_html%22%2C%22args%22%3A%7B%22nsp%22%3A%225e9490c3b97b64cbaf5a9bee4048b627%22%2C%22iframe_width%22%3A%22725%22%2C%22iframe_height%22%3A%22230%22%7D%7D&nsp=aefb5587a889ac3ff1513a64062e1099 HTTP/1.1" 893429

==> /var/log/httpd/ssl_request_log-20160228 <==
[24/Feb/2016:14:23:36 +0800] 10.1.1.103 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_pagetop_alert_content_html%22%2C%22args%22%3A%22%22%7D&nsp=e7633ffba5b5f37e1b2761e88a5e063d HTTP/1.1" -
[24/Feb/2016:14:23:36 +0800] 10.1.1.103 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_minemap_dashlet_html%22%2C%22args%22%3A%7B%22nsp%22%3A%225e9490c3b97b64cbaf5a9bee4048b627%22%2C%22iframe_width%22%3A%22725%22%2C%22iframe_height%22%3A%22230%22%7D%7D&nsp=e7633ffba5b5f37e1b2761e88a5e063d HTTP/1.1" 893464
[24/Feb/2016:14:24:06 +0800] 10.1.1.103 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_pagetop_alert_content_html%22%2C%22args%22%3A%22%22%7D&nsp=e7633ffba5b5f37e1b2761e88a5e063d HTTP/1.1" -
[24/Feb/2016:14:24:06 +0800] 10.1.1.103 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_service_status_summary_html%22%2C%22args%22%3A%7B%22nsp%22%3A%224a294cd5ee4205c38476b00699a4c80d%22%2C%22iframe_width%22%3A%22250%22%2C%22iframe_height%22%3A%22105%22%7D%7D&nsp=e7633ffba5b5f37e1b2761e88a5e063d HTTP/1.1" 2049
[24/Feb/2016:14:24:06 +0800] 10.1.1.103 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_host_status_summary_html%22%2C%22args%22%3A%7B%22nsp%22%3A%224a294cd5ee4205c38476b00699a4c80d%22%2C%22iframe_width%22%3A%22214%22%2C%22iframe_height%22%3A%22108%22%7D%7D&nsp=e7633ffba5b5f37e1b2761e88a5e063d HTTP/1.1" 1752
[24/Feb/2016:14:24:06 +0800] 10.1.1.103 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_latestalerts_dashlet_html%22%2C%22args%22%3A%7B%22nsp%22%3A%225e9490c3b97b64cbaf5a9bee4048b627%22%2C%22iframe_width%22%3A%22827%22%2C%22iframe_height%22%3A%22559%22%7D%7D&nsp=e7633ffba5b5f37e1b2761e88a5e063d HTTP/1.1" 11894
[24/Feb/2016:14:24:06 +0800] 10.1.1.103 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_hostgroup_status_summary_html%22%2C%22args%22%3A%7B%22nsp%22%3A%22f43f98820bcef15cccaeebe16e4340a9%22%2C%22iframe_width%22%3A%22574%22%2C%22iframe_height%22%3A%22281%22%7D%7D&nsp=e7633ffba5b5f37e1b2761e88a5e063d HTTP/1.1" 6877
[24/Feb/2016:14:24:06 +0800] 10.1.1.103 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_minemap_dashlet_html%22%2C%22args%22%3A%7B%22nsp%22%3A%225e9490c3b97b64cbaf5a9bee4048b627%22%2C%22iframe_width%22%3A%22725%22%2C%22iframe_height%22%3A%22230%22%7D%7D&nsp=e7633ffba5b5f37e1b2761e88a5e063d HTTP/1.1" 893462
[24/Feb/2016:14:24:36 +0800] 10.1.1.103 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_pagetop_alert_content_html%22%2C%22args%22%3A%22%22%7D&nsp=e7633ffba5b5f37e1b2761e88a5e063d HTTP/1.1" -
[24/Feb/2016:14:24:36 +0800] 10.1.1.103 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_minemap_dashlet_html%22%2C%22args%22%3A%7B%22nsp%22%3A%225e9490c3b97b64cbaf5a9bee4048b627%22%2C%22iframe_width%22%3A%22725%22%2C%22iframe_height%22%3A%22230%22%7D%7D&nsp=e7633ffba5b5f37e1b2761e88a5e063d HTTP/1.1" 893522

==> /var/log/httpd/ssl_request_log-20160306 <==
[01/Mar/2016:22:07:21 +0800] 10.1.1.45 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "POST /wp-content/plugins/simple-ads-manager/sam-ajax-admin.php HTTP/1.1" 348
[01/Mar/2016:22:07:21 +0800] 10.1.1.45 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.php HTTP/1.1" 315
[01/Mar/2016:22:07:21 +0800] 10.1.1.45 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /wp-content/plugins/work-the-flow-file-upload/public/assets/jQuery-File-Upload-9.5.0/server/php/index.php HTTP/1.1" 396
[01/Mar/2016:22:07:21 +0800] 10.1.1.45 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /documents.html HTTP/1.1" 306
[01/Mar/2016:22:07:21 +0800] 10.1.1.45 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /wp-content/plugins/aviary-image-editor-add-on-for-gravity-forms/readme.txt HTTP/1.1" 366
[01/Mar/2016:22:07:55 +0800] 10.1.1.45 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 2999
[01/Mar/2016:22:07:55 +0800] 10.1.1.45 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 2999
[01/Mar/2016:22:07:55 +0800] 10.1.1.45 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /\"><script>alert(document.domain)</script>.html HTTP/1.1" 340
[01/Mar/2016:22:07:55 +0800] 10.1.1.45 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /\"><script>alert(document.domain)</script>.html HTTP/1.1" 340
[01/Mar/2016:22:19:09 +0800] 10.1.1.45 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 2999
Last edited by tmcdonald on Tue May 17, 2016 5:03 pm, edited 1 time in total.
Reason: Please use [code][/code] tags around long output
rkennedy
Posts: 6579
Joined: Mon Oct 05, 2015 11:45 am

Re: Automatic login fails with "invalid username or password

Post by rkennedy »

Just to clarify - can you show us the complete URL you're trying to access with the token?
Former Nagios Employee
andrewmeneguz
Posts: 7
Joined: Tue Oct 14, 2014 11:29 pm

Re: Automatic login fails with "invalid username or password

Post by andrewmeneguz »

Apologies for the late reply, the URL is simply: http://srvnagios/nagiosxi/login.php
rkennedy
Posts: 6579
Joined: Mon Oct 05, 2015 11:45 am

Re: Automatic login fails with "invalid username or password

Post by rkennedy »

You mentioned using automatic login, but I don't see an API key or username present. Were you specifying one in your attempt?
Former Nagios Employee
andrewmeneguz
Posts: 7
Joined: Tue Oct 14, 2014 11:29 pm

Re: Automatic login fails with "invalid username or password

Post by andrewmeneguz »

No I don't specify anything in the username or password field, i simply press the "Auto-Login" button - I've previously logged in as an Administrator and configured the "Automatic Login" feature to use the read-only account.

In the previous version this worked without any other input.

If i specify the username and password for the read-only account it authenticates fine, my understanding of 'Auto-Login' is that it should not require any input.
User avatar
hsmith
Agent Smith
Posts: 3539
Joined: Thu Jul 30, 2015 11:09 am
Location: 127.0.0.1
Contact:

Re: Automatic login fails with "invalid username or password

Post by hsmith »

I tested this multiple times with multiple users on my system and it worked.

Can you try with a different browser / setting a different user to the automatic login user?
Former Nagios Employee.
me.
Locked