Configuration wizards hang + NAGIOSQL LOGIN FAILED

[Johan159]

Hello,

We are facing an issue with our Nagios installation. Configuration wizards hang at "Waiting for configuration verification". Furthermore, we receive a time out error when trying to restart the services through the WebUI.

I then tried to upgrade our installation and received the following error : NAGIOSQL LOGIN FAILED.

I guess these issues are connected...

[tgriep]

The NAGIOSQL LOGIN FAILED error could be caused by a few issues on the server so to be sure we would need to see the output of the following commands.

Code: Select all

cd /usr/local/nagiosxi/scripts
su nagios
./reconfigure_nagios.sh

If you want to try some of the solutions, this KB article would be the first to check.
https://support.nagios.com/kb/article/n ... ailed.html

Another cause is that the security settings in XI will have to be reset and to do that, go to the Admin > Reset Security Credentials menu, and click on the Update Credentials button.
You don't have to change any of the passwords in that menu, just click the button.

If the system is configured for SSL, one of the settings may have been missed.
Take a look at the link below for the guide for setting up SSL on the XI system.
https://assets.nagios.com/downloads/nag ... s%20XI.pdf

Let us know what you find.

[Johan159]

Hello,

Thank you for your reply. Here is the output of the reconfigure command.

Code: Select all

[nagios@vmwnagiosmon1 scripts]$ ./reconfigure_nagios.sh
URL: http://localhost/nagiosxi/includes/components/ccm/
CMDLINE
/usr/bin/wget --save-cookies nagiosql.cookies --keep-session-cookies http://localhost/nagiosxi/includes/components/ccm/ --no-check-certificate --post-data 'submit=Login&hidelog=true&loginSubmitted=true&backend=1&username=nagiosxi&password=R66u8G' -O nagiosql.login--2017-07-13 13:16:06--  http://localhost/nagiosxi/includes/components/ccm/
Resolving localhost... ::1, 127.0.0.1
Connecting to localhost|::1|:80... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://localhost/nagiosxi/includes/components/ccm/ [following]
--2017-07-13 13:16:06--  https://localhost/nagiosxi/includes/components/ccm/
Connecting to localhost|::1|:443... connected.
WARNING: cannot verify localhost’s certificate, issued by “/DC=local/DC=erasme/DC=hopital/CN=ULB-CUB Hopital ERASME Issuing CA 01”:
  Unable to locally verify the issuer’s authority.
WARNING: no certificate subject alternative name matches
        requested host name “localhost”.
HTTP request sent, awaiting response... 302 Found
Location: https://localhost/nagiosxi/login.php?redirect=/nagiosxi/includes/components/ccm/index.php%3f&noauth=1 [following]
--2017-07-13 13:16:06--  https://localhost/nagiosxi/login.php?redirect=/nagiosxi/includes/components/ccm/index.php%3f&noauth=1
Connecting to localhost|::1|:443... connected.
WARNING: cannot verify localhost’s certificate, issued by “/DC=local/DC=erasme/DC=hopital/CN=ULB-CUB Hopital ERASME Issuing CA 01”:
  Unable to locally verify the issuer’s authority.
WARNING: no certificate subject alternative name matches
        requested host name “localhost”.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/html]
Saving to: “nagiosql.login”

    [ <=>                                                                                                                                                     ] 26,248      --.-K/s   in 0.01s

2017-07-13 13:16:06 (2.45 MB/s) - “nagiosql.login” saved [26248]

NAGIOSQL LOGIN FAILED!

I see warnings about certificates, and we indeed implemented SSL a couple days ago. I followed the instructions on the documentation you are referring to, could it be that we have to import as well our root and intermediate certificate? In such case, how can we do this?

[tgriep]

You should not have to add the other certificates to the server, what you have should be fine.

Did you try this on the server?
"Another cause is that the security settings in XI will have to be reset and to do that, go to the Admin > Reset Security Credentials menu, and click on the Update Credentials button.
You don't have to change any of the passwords in that menu, just click the button."

If after doing the above, you still have the issue, please post the following files so we can view the settings.
/etc/httpd/conf/httpd.conf
/etc/httpd/conf.d/nagiosxi.conf
/etc/httpd/conf.d/ssl.conf
/etc/hosts
/usr/local/nagiosxi/html/config.inc.php

[Johan159]

I tried the Update Credentials but still have the same error when I launch the reconfigure script.

I attached the required files.

Thanks in advance for your help!

[tgriep]

It looks like a setting was missed when SSL was enabled on the server, edit this file

Code: Select all

/usr/local/nagiosxi/html/config.inc.php

Change the following from

Code: Select all

$cfg['use_https'] = false;

to

Code: Select all

$cfg['use_https'] = true;

Save the file and restart the following daemons by running this as root

Code: Select all

service nagios restart
service httpd restart

Try that and let up know if it works.

Take a look at the link below for the guide for setting up SSL on the XI system.
Verify that the settings on page 10 were done. That would cause the error as well.
https://assets.nagios.com/downloads/nag ... s%20XI.pdf

[Johan159]

Thank you so much. We indeed missed that part...

Problem has been fixed, thanks a lot for your help (this thread can be closed)!