Waiting for configuration verification never ends.

[suryakiran]

I am able to execute the command /usr/local/nagiosxi/scripts/reconfigure_nagios.sh as user nagios happily.

--- reset_config_perms.sh ------------
> Setting CCM script permissions
> Setting script permissions
> Setting special component script permissions
> Setting configuration file/directory permissions
> Setting perfdata directory and RRD permissions
> Setting NOM checkpoint user:group permissions
> + Setting CCM configuration file user:group permissions
> + Setting Recurring Downtime file user:group permissions
> + Setting BPI configuration file user:group permissions
--------------------------------------

--- ccm_import.php -------------------
> Setting import directory: /usr/local/nagios/etc/import/
> Importing config files into the CCM
No files to import
--------------------------------------

--- ccm_export.php -------------------
> Writing CCM configuration to Nagios files
Finished writing out configuraton
--------------------------------------

--------------------------------------
> Verifying configuration with Nagios Core
> Output:
Nagios Core 4.4.2
Copyright (c) 2009-present Nagios Core Development Team and Community Contributors
Copyright (c) 1999-2009 Ethan Galstad
Last Modified: 2018-08-16
License: GPL

Website: https://www.nagios.org
Reading configuration data...
Read main config file okay...
Read object config files okay...

Running pre-flight check on configuration data...

Checking objects...
Checked 12 services.
Checked 1 hosts.
Checked 12 host groups.
Checked 0 service groups.
Checked 2 contacts.
Checked 2 contact groups.
Checked 128 commands.
Checked 8 time periods.
Checked 0 host escalations.
Checked 0 service escalations.
Checking for circular paths...
Checked 1 hosts
Checked 0 service dependencies
Checked 0 host dependencies
Checked 8 timeperiods
Checking global event handlers...
Checking obsessive compulsive processor commands...
Checking misc settings...

Total Warnings: 0
Total Errors: 0

Things look okay - No serious problems were detected during the pre-flight check
> Return Code: 0
--------------------------------------

Please find the below output.

zip -r /tmp/polkit_files.zip /etc/polkit-1 /usr/share/polkit-1
adding: etc/polkit-1/ (stored 0%)
adding: etc/polkit-1/localauthority/ (stored 0%)
adding: etc/polkit-1/localauthority/30-site.d/ (stored 0%)
adding: etc/polkit-1/localauthority/50-local.d/ (stored 0%)
adding: etc/polkit-1/localauthority/90-mandatory.d/ (stored 0%)
adding: etc/polkit-1/localauthority/10-vendor.d/ (stored 0%)
adding: etc/polkit-1/localauthority/20-org.d/ (stored 0%)
adding: etc/polkit-1/rules.d/ (stored 0%)
adding: etc/polkit-1/rules.d/49-polkit-pkla-compat.rules (deflated 60%)
adding: etc/polkit-1/rules.d/50-default.rules (deflated 28%)
adding: etc/polkit-1/localauthority.conf.d/ (stored 0%)
adding: usr/share/polkit-1/ (stored 0%)
adding: usr/share/polkit-1/rules.d/ (stored 0%)
adding: usr/share/polkit-1/actions/ (stored 0%)
adding: usr/share/polkit-1/actions/com.redhat.SubscriptionManager.policy (deflated 52%)
adding: usr/share/polkit-1/actions/org.fedoraproject.FirewallD1.policy (deflated 86%)
adding: usr/share/polkit-1/actions/org.freedesktop.locale1.policy (deflated 77%)
adding: usr/share/polkit-1/actions/org.freedesktop.machine1.policy (deflated 65%)
adding: usr/share/polkit-1/actions/org.fedoraproject.FirewallD1.desktop.policy.choice (deflated 85%)
adding: usr/share/polkit-1/actions/net.reactivated.fprint.device.policy (deflated 78%)
adding: usr/share/polkit-1/actions/abrt_polkit.policy (deflated 62%)
adding: usr/share/polkit-1/actions/org.freedesktop.import1.policy (deflated 61%)
adding: usr/share/polkit-1/actions/org.freedesktop.systemd1.policy (deflated 80%)
adding: usr/share/polkit-1/actions/org.fedoraproject.FirewallD1.server.policy.choice (deflated 86%)
adding: usr/share/polkit-1/actions/com.redhat.tuned.policy (deflated 87%)
adding: usr/share/polkit-1/actions/org.freedesktop.NetworkManager.policy (deflated 85%)
adding: usr/share/polkit-1/actions/com.redhat.RHSM1.Facts.policy (deflated 62%)
adding: usr/share/polkit-1/actions/com.redhat.RHSM1.policy (deflated 49%)
adding: usr/share/polkit-1/actions/org.freedesktop.policykit.policy (deflated 52%)
adding: usr/share/polkit-1/actions/org.freedesktop.login1.policy (deflated 91%)
adding: usr/share/polkit-1/actions/org.freedesktop.hostname1.policy (deflated 79%)
adding: usr/share/polkit-1/actions/org.freedesktop.timedate1.policy (deflated 80%)

[ssax]

Please PM this file that was generated:

Code: Select all

/tmp/polkit_files.zip

[suryakiran]

Hi ,

Please check the attachment.

[ssax]

So is the only outstanding issue the check_icmp error?

You can run the reconfigure_nagios.sh script as the nagios user but does it work when applying configuration through the web interface?

What is the output of this command?

Code: Select all

ls -l `which ping`

[suryakiran]

Yes the only issue is with icmp error.
I can run reconfigure_nagios.sh script as the nagios user and also applying configuration works good through the web interface.

My hosts are showing down due to the below icmp warning.
Down
Warning: This plugin must be either run as root or setuid root.
To run as root, you can use a tool like sudo.
To set the setuid permissions, use the command:
chmod u+s yourpluginfile
check_icmp: Failed to obtain ICMP socket: Operation not permitted

Below are the permissions:
ll check_icmp
-rwsrwxr-x 1 root root 227464 Nov 8 10:12 check_icmp


Output:-
ls -l `which ping`
-rwxr-xr-x. 1 root root 66168 May 22 2017 /usr/bin/ping

[ssax]

Please run these commands as root and see if it resolves it:

Code: Select all

chown root.nagios /usr/local/nagios/libexec/check_icmp
chmod u+s /usr/local/nagios/libexec/check_icmp

[suryakiran]

Do i need to restart Nagios after running these commands.

[suryakiran]

Restarted the nagios after changes but still the same.

check_icmp
-rwsrwxr-x 1 root nagios 227464 Nov 8 10:12 check_icmp

[ssax]

This turned out to be nosetuid being defined in your /etc/fstab entry which wouldn't allow the suid to work properly, remounting it without nosetuid allowed it to work.

I'm just posting this for future readers.

[suryakiran]

Thanks SSAX
Really appreciated for your help. You can close the ticket.