Cannot write /certs when saving a certificate

[cdienger]

So logging using Firefox works but Chrome doesn't? Is this consistent?

Is there a web proxy between the client and the NLS machine?

[Dan_F_DXC]

No proxy between the nodes. So the question is what do we need to tweak.

[cdienger]

Not sure what needs tweaking yet.

Is the behavior still the same with logins not working for Chrome but Firefox works(although running into the issue with the blank screen when importing users)?

Run the tail command on the web server logs while trying to use the import option with Firefox:

Code: Select all

tail -f /var/log/httpd/*

and provide the output this generates.

[Dan_F_DXC]

K so this is the result:


[Wed Jul 22 12:46:27.556411 2020] [mpm_prefork:notice] [pid 1483] AH00163: Apache/2.4.6 (Red Hat Enterprise Linux) PHP/5.4.16 configured -- resuming normal operations
[Wed Jul 22 12:46:27.556435 2020] [core:notice] [pid 1483] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'

==> access_log <==
10.198.5.105 - - [23/Jul/2020:07:40:43 -0500] "POST /nagioslogserver/admin/users/import HTTP/1.1" 500 - "http://hpsatvld5352.mgmt.sabre.com/nagi ... ers/import" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"

[Dan_F_DXC]

K so this is the result:


[Wed Jul 22 12:46:27.556411 2020] [mpm_prefork:notice] [pid 1483] AH00163: Apache/2.4.6 (Red Hat Enterprise Linux) PHP/5.4.16 configured -- resuming normal operations
[Wed Jul 22 12:46:27.556435 2020] [core:notice] [pid 1483] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'

==> access_log <==
10.198.5.105 - - [23/Jul/2020:07:40:43 -0500] "POST /nagioslogserver/admin/users/import HTTP/1.1" 500 - "http://hpsatvld5352.mgmt.sabre.com/nagi ... ers/import" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"

[Dan_F_DXC]

and Chrome gives me the 500 error mozilla just gives me a blank page and no information.

[cdienger]

500 errors can be caused by the memory limit in php.ini. Try increasing it per https://support.nagios.com/kb/article/n ... y-132.html.

[Dan_F_DXC]

well I bumped it to 512meg still not working here is what is in the logs now:

==> access_log <==
10.198.5.105 - - [24/Jul/2020:08:18:43 -0500] "GET /nagioslogserver/admin HTTP/1.1" 200 13569 "http://hpsatvld5352.mgmt.sabre.com/nagioslogserver/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
10.198.5.105 - - [24/Jul/2020:08:18:43 -0500] "GET /nagioslogserver/media/css/elastichq.css?ver=2.1.6 HTTP/1.1" 200 9647 "http://hpsatvld5352.mgmt.sabre.com/nagi ... rver/admin" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
10.198.5.105 - - [24/Jul/2020:08:18:43 -0500] "POST /nagioslogserver/api/system/status HTTP/1.1" 200 517 "http://hpsatvld5352.mgmt.sabre.com/nagi ... rver/admin" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
::1 - - [24/Jul/2020:08:18:45 -0500] "OPTIONS * HTTP/1.0" 200 - "-" "Apache/2.4.6 (Red Hat Enterprise Linux) PHP/5.4.16 (internal dummy connection)"
10.198.5.105 - - [24/Jul/2020:08:18:46 -0500] "GET /nagioslogserver/admin/users HTTP/1.1" 200 11857 "http://hpsatvld5352.mgmt.sabre.com/nagi ... rver/admin" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
10.198.5.105 - - [24/Jul/2020:08:18:47 -0500] "POST /nagioslogserver/api/system/status HTTP/1.1" 200 517 "http://hpsatvld5352.mgmt.sabre.com/nagi ... dmin/users" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
10.198.5.105 - - [24/Jul/2020:08:18:48 -0500] "GET /nagioslogserver/admin/users/import HTTP/1.1" 200 11379 "http://hpsatvld5352.mgmt.sabre.com/nagi ... dmin/users" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
10.198.5.105 - - [24/Jul/2020:08:18:49 -0500] "POST /nagioslogserver/api/system/status HTTP/1.1" 200 517 "http://hpsatvld5352.mgmt.sabre.com/nagi ... ers/import" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
::1 - - [24/Jul/2020:08:18:54 -0500] "OPTIONS * HTTP/1.0" 200 - "-" "Apache/2.4.6 (Red Hat Enterprise Linux) PHP/5.4.16 (internal dummy connection)"
10.198.5.105 - - [24/Jul/2020:08:19:01 -0500] "POST /nagioslogserver/admin/users/import HTTP/1.1" 500 - "http://hpsatvld5352.mgmt.sabre.com/nagi ... ers/import" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"

==> error_log <==
[Wed Jul 22 12:40:03.225541 2020] [mpm_prefork:notice] [pid 123928] AH00170: caught SIGWINCH, shutting down gracefully
[Wed Jul 22 12:46:27.347308 2020] [suexec:notice] [pid 1483] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Wed Jul 22 12:46:27.429236 2020] [lbmethod_heartbeat:notice] [pid 1483] AH02282: No slotmem from mod_heartmonitor
[Wed Jul 22 12:46:27.556411 2020] [mpm_prefork:notice] [pid 1483] AH00163: Apache/2.4.6 (Red Hat Enterprise Linux) PHP/5.4.16 configured -- resuming normal operations
[Wed Jul 22 12:46:27.556435 2020] [core:notice] [pid 1483] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'
[Fri Jul 24 08:17:39.422406 2020] [mpm_prefork:notice] [pid 1483] AH00170: caught SIGWINCH, shutting down gracefully
[Fri Jul 24 08:17:40.560999 2020] [suexec:notice] [pid 79385] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Fri Jul 24 08:17:40.585483 2020] [lbmethod_heartbeat:notice] [pid 79385] AH02282: No slotmem from mod_heartmonitor
[Fri Jul 24 08:17:40.598514 2020] [mpm_prefork:notice] [pid 79385] AH00163: Apache/2.4.6 (Red Hat Enterprise Linux) PHP/5.4.16 configured -- resuming normal operations
[Fri Jul 24 08:17:40.598536 2020] [core:notice] [pid 79385] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'

[Dan_F_DXC]

In an effort to enhance error logging I followed some of the advice listed here:
https://stackoverflow.com/questions/473 ... n-the-logs

I tried again and stilll not getting anything. There was a web reference to permissions errors for CGI operations so do we need to look at where apache is trying to use cgi for NLS, the folder permissions?

[cdienger]

Set the value to 2048m and test. If there are still errors after that then gather a tcpdump and reproduce the error:

Code: Select all

yum -y install tcpdump
tcpdump -s 0 -i any -w output.pcap

Reproduce the beavior while it is running then use CTRL+C to stop it and PM me the output.pcap it provides.

I would also like to see the full log that was produced with debugging enabled.