NSP: Sorry Dave, I can't let you do that

[n8860104460]

OS: Centos 6.9
Nagios XI Version: 5.4.10

We are constantly getting the NSP: Sorry Dave, I can't let you do that error message and cannot log into these new systems.
We are migrating these systems from an older system to a new one and we're stuck with that error message and cannot log in at all.

Here is a few things that I've tried:
1) I've set up the php.ini file with the timezone "Eastern/US" time zone.
2) I've set the system time with tzselect and set it to Eastern/US
3) I've configured and setup NTP and connected it with the internal time servers as it cannot reach the outside world
4) I've verified that the time is correct in that timezone
5) I couldn't log into the system, so I updated the variable in the postgres DB to match the timezone

I still can't login and don't know why it doesn't work. Second thing, every single login I try, even invalid logins give me this error.

[dwasswa]

Hi @n8860104460,

Session protection was added to 2009R1.2C to prevent CSRF attacks. This code to do this caused some users to see this error. The problem was due to the user's browser caching older versions of the XI javascript code. In order to clear the cache and prevent this from happening, you need to clear your browser's cache. This is typically done (in Firefox) by holding down the shift key and clicking reload.


Another possible cause is that the server's time is out of sync with that of the browser.
hanging The System Time

Nagios XI needs to be configured with the correct timezone for all features to work. This can be performed via:

XI 5 onwards

Admin > System Config > System Settings

Pre XI 5

Admin > System Config > Manage System Config



A detailed document that explains all the settings performed can be found here:Changing the system Time

Please let us know if you have any questions.

[n8860104460]

We already cleared the browser cache and used 3 different browsers. We've tried this on several different computers and several different browsers and we still can't login to the new system. Also, we can't login to the interface, so the "Admin->System Config->System Settings" does not work at all. We've reviewed the document "Changing the system time" and have followed that all the way through and it still does not let us login.

Please let us know what we need to do.

[dwasswa]

Oh,okay if you can't login to the xi web UI then just go open port 80 on your firewall then restart httpd and nagios with commands:

Code: Select all

systemctl restart httpd.service

then

Code: Select all

systemctl restart nagios.service

[n8860104460]

Ok, I logged in and restarted apache and I verified all the time settings. The time on the system is correct. The php.ini file is set correctly, and the system timezone is also set correctly.

I restarted apache and I still get the error. Please advise

[dwasswa]

Hi @ n8860104460,

Please power down the vm and power it back up and let me know..

Also make sure the date and time on your work station is correct.

[n8860104460]

I tried logging into the system after they were restarted. I am having no luck logging in and am still getting the same error.
I used a "private Firefox session" as well to ensure that it wasn't storing cookies and my old session. I also tried it in chrome and nothing worked.

[scottwilkerson]

@n8860104460 have you verified the time, timezone AND date on the computer that you are working on are set correctly?

[n8860104460]

yes, verified all are set correctly.

[jomann]

Have you recently changed from HTTPS -> HTTP or from HTTP -> HTTPS? Can you also make sure to delete all the old session data on the XI server? PHP should be saving session data in /var/lib/php/session, you can safely delete the sess_* files in there. This will log anyone who is logged in out, but may help the login issue since the NSP is based on session IDs.