Enable X-Frame-Options

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
SETR
Posts: 45
Joined: Mon Jan 30, 2017 4:10 pm

Re: Enable X-Frame-Options

Post by SETR »

The Xframe does not work. I don't think the issue is in JIRA because even "kyang" tried and he had the same issue. For some reason Nagios does not work inside a frame. I have attached a screenshot for your reference.
You do not have the required permissions to view the files attached to this post.
npolovenko
Support Tech
Posts: 3457
Joined: Mon May 15, 2017 5:00 pm

Re: Enable X-Frame-Options

Post by npolovenko »

Hello, @SETR. We managed to successfully test the iframe with @kyang. We tested it on local network and used a simple html boilerplate. Make sure to go to Admin/System settings/ Security and add the ip to Allowed hosts, check the disable restrictions box as well--->Update settings. Make sure to change the iframe IP and token. Admin/Manage Components/Backend API URL component/Edit select Nagiosadmin -->copy the token from there.

Troubleshooting integration with third-party services is harder because we don't know exactly what code they're using to insert the frame.

Create a test html document on your computer with the source code below. See if it works.

Code: Select all

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" 
    "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">

<html>
    <head>
        <rel="stylesheet" type="text/css" href="css/main.css" />
        <meta http-equiv="content-type" content="text/php; charset=utf-8" />

        <title>Site Template - Welcome!</title>
    </head>

    <body>
       


<iframe src="http://192.168.4.172/nagiosxi/includes/components/xicore/status.php?show=services&username=nagiosadmin&ticket=NWV60eth&req_frame_access=192.168.3.46"></iframe>


    <footer>
       
    </footer>
</html>
As of May 25th, 2018, all communications with Nagios Enterprises and its employees are covered under our new Privacy Policy.
SETR
Posts: 45
Joined: Mon Jan 30, 2017 4:10 pm

Re: Enable X-Frame-Options

Post by SETR »

I will try this out and let you know. Thanks for looking into this issue.
npolovenko
Support Tech
Posts: 3457
Joined: Mon May 15, 2017 5:00 pm

Re: Enable X-Frame-Options

Post by npolovenko »

@SETR, Sounds good, keep us updated!
As of May 25th, 2018, all communications with Nagios Enterprises and its employees are covered under our new Privacy Policy.
SETR
Posts: 45
Joined: Mon Jan 30, 2017 4:10 pm

Re: Enable X-Frame-Options

Post by SETR »

The test code you gave works perfectly but looks like the issue is with the JIRA dashboard. We will be working with the JIRA team to resolve this. Thank you all for the support!!
tmcdonald
Posts: 9117
Joined: Mon Sep 23, 2013 8:40 am

Re: Enable X-Frame-Options

Post by tmcdonald »

Glad to hear it's moving along at least. Are we okay to lock this up on our end?
Former Nagios employee
SETR
Posts: 45
Joined: Mon Jan 30, 2017 4:10 pm

Re: Enable X-Frame-Options

Post by SETR »

Yes, Please.
kyang

Re: Enable X-Frame-Options

Post by kyang »

Sounds good! Closing this topic!

Thank you for using the Nagios Support Forum!
Locked