Report fetching error

[progressive.nagiosXI]

Hi Team,

After update Nagiosxi yesterday (Nagios XI 5.6.10)we are facing error in report fetching from all users

Error: you are not authorized to view this report

Thanks

[tgriep]

What was the previous version of XI that the server was running?
If you login to the server using the nagiosadmin account, does it show the same error?

If you go to the Admin > Manage User menu and edit one of the users, What are the security settings set to?

Are the users part of the services in that Service Group specified in the menu?

[progressive.nagiosXI]

hi

we take Nagiosxi-5.6.8 backup on 5Feb2020 ==> we still don't face any issue on that version(we create and started the server and checked again no issue found in 5.6.8)
and Update Nagiosxito-5.6.10 on 7feb2020 ==> here we face this error

What was the previous version of XI that the server was running?
==> 5.6.8
If you login to the server using the nagiosadmin account, does it show the same error?
==>> No ,here no error found for nagiosadmin user
If you go to the Admin > Manage User menu and edit one of the users, What are the security settings set to?
==> please find snapshot ,we set same permission to all users
Are the users part of the services in that Service Group specified in the menu?
==> we created servicegroup and added user server-services to it (no error on older xi version)

Thanks

[tgriep]

I tried to recreate the issue on an XI 5.6.10 system and I could not duplicate the issue.
When I setup a user to have access to a Service that was part of a Service Group, it did allow me to run and view the report.

When you login to XI as one of the users and go to the Home > Service Details menu, do you see the services listed there and are they part of the Service Group?

It could be the Session settings in the Admin > System settings menu under the Security Tab.
What are the settings set to in that menu?

Run these commands as root and post the output so I can get some details from the server.

Code: Select all

uname -a
cat /etc/*release*
php -v

[progressive.nagiosXI]

When you login to XI as one of the users and go to the Home > Service Details menu, do you see the services listed there and are they part of the Service Group?
==>> yes we we all services there and also describe in servicegroup.
It could be the Session settings in the Admin > System settings menu under the Security Tab.
What are the settings set to in that menu?
==>> snap attached
Run these commands as root and post the output so I can get some details from the server.
[root@monitoring-nagiosxi ~]# uname -a
Linux monitoring-nagiosxi.progressive.in 3.10.0-514.26.2.el7.x86_64 #1 SMP Fri J un 30 05:26:04 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
[root@monitoring-nagiosxi ~]# cat /etc/*release*
NAME="Red Hat Enterprise Linux Server"
VERSION="7.3 (Maipo)"
ID="rhel"
ID_LIKE="fedora"
VERSION_ID="7.3"
PRETTY_NAME="Red Hat Enterprise Linux Server 7.3 (Maipo)"
ANSI_COLOR="0;31"
CPE_NAME="cpe:/o:redhat:enterprise_linux:7.3:GA:server"
HOME_URL="https://www.redhat.com/"
BUG_REPORT_URL="https://bugzilla.redhat.com/"

REDHAT_BUGZILLA_PRODUCT="Red Hat Enterprise Linux 7"
REDHAT_BUGZILLA_PRODUCT_VERSION=7.3
REDHAT_SUPPORT_PRODUCT="Red Hat Enterprise Linux"
REDHAT_SUPPORT_PRODUCT_VERSION="7.3"
Red Hat Enterprise Linux Server release 7.3 (Maipo)
Red Hat Enterprise Linux Server release 7.3 (Maipo)
cpe:/o:redhat:enterprise_linux:7.3:ga:server
[root@monitoring-nagiosxi ~]# php -v
PHP Warning: PHP Startup: Unable to load dynamic library '/usr/lib64/php/modules/newrelic.so' - /usr/lib64/php/modules/newrelic.so: cannot open shared object file: No such file or directory in Unknown on line 0
PHP 5.4.16 (cli) (built: Jun 19 2018 13:09:01)
Copyright (c) 1997-2013 The PHP Group
Zend Engine v2.4.0, Copyright (c) 1998-2013 Zend Technologies
[root@monitoring-nagiosxi ~]#

[tgriep]

Could you Private Message me your Nagios XI System Profile so we can review it?
To get your system profile. Login to the Nagios XI GUI using a web browser.
Click the "Admin" > "System Profile" Menu
Click the "Download Profile" button
Save the profile.zip file and Private Message it to me.

I will also need to know the name of the service group and the user you are testing with.

Thanks.

[progressive.nagiosXI]

Hi,

required details shared in PM

Thanks

[tgriep]

I went through only the one user account from the top post called direct and it looks like the user settings in the database do not match what you have shown in the screen shot.
Edit that user and re-setup the permissions and set them as a read only user.

That contact is setup to see the service called "Physical Memory Usage" in the service group so have that account login again to the XI GUI after the user account changes, and go to the Service Details menu and show us that is can see that service.
Then go to the report menu and run the report and let us know if that user can run it.

If not, go in to the Core Config Manager > Contacts menu and on the right hand side of the menu, click on the Relationships icon. The Blue Circle with the Letter i.
It will popup a menu showing the relationships for the Contact. Show the settings for that contact.

[progressive.nagiosXI]

Hi

All screenshots and fresh profile sent in PM to tgriep
we removed user direct for testing after sharing screenshot that day no problem we create scenario again

steps taken by me as per your guidelines
1) We add user direct with contact direct read only permissions [screenshot attached]
2) we add only that host in user contact direct via bulk modification tool
3) then do apply configuration
4) after 15 min facing same issue with another two issue
5) some unknown hosts showing in direct user dashoard which was not added [screenshot attached]
6) service graph icon not showing and this issue also faced in many users.[screenshot attached]
7) but i am able to fetch data from performance graph [screenshot attached]
8) from nagiosadmin user contact direct relatioship [screenshot attached]
9) after doing all such things fresh profile dowload and attached
10) issue still not resolve

Thanks

[tgriep]

The last profile shows that there is a configuration error and it needs to be resolved.
If not, when you do any changes, the Apply will detect an error and restore the last known good config which restores the settings which you do not want changed.

login to the XI GUI and go to the Core Config Manager
Under "Tools", click "Write Config Files" or if you are running a newer versions of XI, The menu is called "Config File Management"
Click on the "Write" button, then the "Delete" button then click the "Write" button and then the "Verify" button.
If you get any errors, resolve them and click on the "Delete" button, "Write", "Verify" until all of the errors are resolved.
Click the Apply Configuration link and click the "Apply Configuration" button after ALL of the errors are resolved.

5) The unknown hosts look to be valid. If you search through all of the Hosts and Services, you will find that the contact called direct is applied to those hosts.
Go in to the Core Config Manager > Contacts menu and on the right hand side of the menu, click on the Relationships icon next to the contact called direct. The Blue Circle with the Letter i.
It will popup a menu showing the relationships for the Contact. Show the settings for that contact and remove all of the hosts and services except the 2 services and the one host.

Apply the Config and wait for 15 minutes for the system to updated the checks and permissions, etc..


One thing to try, you have a contact called "Direct logistics Notification"m try removing that contact from the system and remove it from the DirectLogistics-35.154.108.180 host as well.

Another thing I see, the server is running Mod Gearman and a old version of Nagios Core.
You should upgrade the version of Core that is installed on your server but you will have to upgrade Mod Gearman on the server as well as the workers at the same time.
This doc has upgrade instructions.
https://assets.nagios.com/downloads/nag ... ios_XI.pdf

I feel the upgrade is necessary to fix the issue you are having as the version of Core and XI do not match and it maybe causing the user permission issue.