Apply Configuration-Waiting For Verification

[hoegh]

we have enable the ssl. please check the ssl.conf file.

[hoegh]

[nagios@OSLMSnagios root]$ cd /usr/local/nagiosxi/scripts
[nagios@OSLMSnagios scripts]$ ./reconfigure_nagios.sh
URL: https://localhost/nagiosxi/includes/components/ccm/
CMDLINE
/usr/bin/wget --save-cookies nagiosql.cookies --keep-session-cookies https://localhost/nagiosxi/includes/components/ccm/ --no-check-certificate --post-data 'submit=Login&hidelog=true&loginSubmitted=true&backend=1&username=nagiosxi&password=configadmin' -O nagiosql.login--2018-02-28 14:35:44-- https://localhost/nagiosxi/includes/components/ccm/
Resolving localhost... 127.0.0.1
Connecting to localhost|127.0.0.1|:443... connected.
WARNING: cannot verify localhostâs certificate, issued by â/C=NO/ST=Norway/L=Oslo/O=Hoegh Autoliners AS/CN=10.202.21.19â
Self-signed certificate encountered.
WARNING: certificate common name â10.202.21.19âlocalhostâ
HTTP request sent, awaiting response... 401 Authorization Required
Authorization failed.
NAGIOSQL LOGIN FAILED!

[scottwilkerson]

Please provide your /etc/httpd/conf.d/nagiosxi.conf

Somewhere there is an apache configuration error ausing the 401 Authorization Required

[hoegh]

[root@OSLMSnagios ~]# more /etc/httpd/conf.d/nagiosxi.conf
<Directory "/usr/local/nagiosxi/html">
# SSLRequireSSL
Options None
AllowOverride None
Order allow,deny
Allow from all
AuthName "Nagios XI"
AuthType Basic
AuthUserFile /usr/local/nagiosxi/etc/htpasswd.users
Require valid-user
</Directory>

Alias /nagiosxi "/usr/local/nagiosxi/html"

# Special configuration to allow .htaccess in custom includes
<Directory "/usr/local/nagiosxi/html/includes/components/custom-includes">
AllowOverride All
Options None
</Directory>

<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule nagiosxi/api/v1/(.*)$ /usr/local/nagiosxi/html/api/v1/index.php?request=$1 [QSA,NC,L]
</IfModule>

[hoegh]

attaching the nagios XI system profile from GUI.

[scottwilkerson]

Code: Select all

[root@OSLMSnagios ~]# more /etc/httpd/conf.d/nagiosxi.conf
<Directory "/usr/local/nagiosxi/html">
#  SSLRequireSSL
   Options None
   AllowOverride None
   Order allow,deny
   Allow from all
   AuthName "Nagios XI"
   AuthType Basic
   AuthUserFile /usr/local/nagiosxi/etc/htpasswd.users
   Require valid-user
</Directory>

This is definitely incorrect, these need to be commented out

Code: Select all

#   AuthName "Nagios XI"
#   AuthType Basic
#   AuthUserFile /usr/local/nagiosxi/etc/htpasswd.users
#   Require valid-user

Then restart httpd

Code: Select all

service httpd restart

[hoegh]

Apply configuration is perfect and working fine.

we do still have challenge with SSL certificate. https://10.202.21.19/nagiosmobile link is still not working in browser. Please let me know your input on the same.

--2018-03-01 14:53:57-- https://localhost/nagiosxi/includes/components/ccm/
Resolving localhost... 127.0.0.1
Connecting to localhost|127.0.0.1|:443... connected.
ERROR: cannot verify localhost's certificate, issued by "/C=NO/ST=Norway/L=Oslo/O=Hoegh Autoliners AS/CN=10.202.21.19":
Self-signed certificate encountered.
ERROR: certificate common name "10.202.21.19" doesn't match requested host name "localhost".
To connect to localhost insecurely, use '--no-check-certificate'.

[scottwilkerson]

Apply configuration is perfect and working fine.

we do still have challenge with SSL certificate. https://10.202.21.19/nagiosmobile link is still not working in browser. Please let me know your input on the same.

--2018-03-01 14:53:57-- https://localhost/nagiosxi/includes/components/ccm/
Resolving localhost... 127.0.0.1
Connecting to localhost|127.0.0.1|:443... connected.
ERROR: cannot verify localhost's certificate, issued by "/C=NO/ST=Norway/L=Oslo/O=Hoegh Autoliners AS/CN=10.202.21.19":
Self-signed certificate encountered.
ERROR: certificate common name "10.202.21.19" doesn't match requested host name "localhost".
To connect to localhost insecurely, use '--no-check-certificate'.

Glad to hear the Apply config is fixed.

https://10.202.21.19/nagiosmobile is not going to work in a browser unless you add an exception to the broswer to allow it. This is because you have a self-signed certificate and also because a certificate cannot name an IP address only a hostname.

[hoegh]

while installing the SSL certificate httpd service is not restarting, pls assist

[scottwilkerson]

I am going to close this thread because we are working on the same problem here
https://support.nagios.com/forum/viewto ... 4&p=246384