"Sorry Dave" Error

[jwalters]

I receive this error when trying to log in:
"NSP: Sorry Dave, I can't let you do that"

I've made no system changes and it was working fine all day until a few minutes ago. The only thing I've done was change the admin password and email when I initially setup and added various nodes via wizards.

[tonyyarusso]

This should be fixed by holding the Shift key and pressing F5. This clears the JavaScript cache.

[admin]

This can occur after an upgrade to 2009R1.2C or later if your browser is caching old Javascript. We had to modify our JS code to fix some potential security problems.

The solution to this is to clear your browser's cache by holding down the SHIFT key and reloading the page.

Hope that helps!

[jwalters]

Thanks!

[cdrshm]

I am experienceing this same problem. I just reciently upgraded to 2009R1.2C. The first time i logged in it worked great. No changes have been made and now when i log in with IE 8 i get the "Sorry Dave" Error.

I have done the "shift" refresh fix, with no luck. I even went into the java app and deleted the temp files, rebooted my system and still get the same error.

Any Suggestions?

Thanks

Chris

[cdrshm]

Tried from Firefox too... I can get logged into the web interface with FF, but dashboards have the "Sorry Dave" Error

Also tried from different workstation with the same result.

Thanks

Chris

[admin]

You have to clear the Firefox cache.

See http://en.wikipedia.org/wiki/Wikipedia: ... lla_family for info on how to do this.

[ange]

With this new Nagios update(added hidden nsp login form value), which is causing this error, we have lost chance to autosubmit login information for autologin to the page from our intranet as well. Is there any way to support this feature again or at least have remember my login info in the future for our users?

[mmestnik]

Ange:
This is the responsibility of the web browser. The check for nsp is only performed on certain pages, these pages can not be accessed directly w/o first providing a valid "form session". We have limited these to pages that contain configurable items.

Using Cookies or other persistent authentication allows anyone who can issue an img tag(like the one on Google's page) to be able to inject data into NagiosXI. The nsp check requires the request to be from a 'signed' NagiosXI document, thus preventing any document located on the internet from accessing NagiosXI
.

[ange]

Thanks for increased security in your internal monitoring tool, but we hope to see at least remember my login name in next version of Nagios, so for multiple admin users and frequent use or quick access while disaster, we will save our users a lot of time for typing and quick access.Thank you.