Unable to remove acknowledgment comments

[atsb]

Hello!

About nagios XI environment
1) Linux Distribution and version? Centos7
2) 32 or 64bit? 64bit
3) VMware Image or Manual Install of XI? Manual install
4) Are there special configurations on your system, ie; is Gnome installed? Are you using a proxy? Are you using SSL? SSL

About the problem:
Normal users are able to acknowledge cirtical state services that they are assign to but after doing so they are unable to remove comments. Trying to remove comment throws error "Command could not be processed" and this goes only for normal users, administrators are able to remove comments. This seems to have happen after upgrading from 5.4.12 to 5.4.13. Pictures are provided below. Hopefully someone can help in this matter.

acknowledgment.JPG

acknowledgment2.JPG

error.jpg

Thank you!

[cdienger]

I haven't been able to reproduce this problem unfortunately. What are the permissions set to on the user? Also, when the user goes to delete an acknolwedgement, run:

tail -f /usr/local/nagiosxi/var/cmdsubsys.log

You should see cmd 16 and 4 run:

PROCESS COMMAND: CMD=16, DATA=a:2:{s:3:"cmd";i:4;s:10:"comment_id";i:295;}
COMMAND DATA: a:2:{s:3:"cmd";i:4;s:10:"comment_id";i:295;}
CMDARR:
Array
(
[cmd] => 4
[comment_id] => 295
)
CORE CMD: DEL_SVC_COMMENT;295
SUBMITTING A NAGIOSCORE COMMAND...

Let us know if you don't see this or if you see anything else logged.

[atsb]

Hello!

Running "tail -f /usr/local/nagiosxi/var/cmdsubsys.log" while doing everything from step1 to step3, does not give me same output as you post. Actually it says only "PROCESSED 0 COMMANDS"

Code: Select all

tail -f /usr/local/nagiosxi/var/cmdsubsys.log
PROCESSED 0 COMMANDS
............................................................
PROCESSED 0 COMMANDS
...................................................

This user has only "Can see all objects" permission and then is assigned to host as contact.

[cdienger]

The backend commands needed to delete the acknowledgement need the "Can see/control monitoring engine" option enabled on the account as well. Please test this and let me know your results.

[atsb]

Yes, it works like this but according to the manual:

The user can see and control (e.g. shutdown or restart) the
monitoring engine. Not recommended unless the user is advanced.
This permission is also required if creating a user to be used with the
Nagios XI Server monitoring wizard.

This gives them way too many unnecessary permissions. Is there any way around this ?

[lmiltchev]

This gives them way too many unnecessary permissions. Is there any way around this ?

Not at the moment, however in Nagios XI 6, there will be more granular/better-defined permissions.

https://www.nagios.com/roadmaps/