NSP: Sorry Dave, I can’t let you do that

willsm · Post by **willsm** » Mon Mar 15, 2021 3:58 am

System details:

Ubuntu 20.04 LTS running in KVM
Nagio XI

Browser being used to access: Firefox / Chrome / Edge

Fault: Upon trying to login to Nagios, users always get: NSP: Sorry Dave, I can’t let you do that

Resolution steps taken:

Have read:

https://support.nagios.com/kb/article/n ... at-33.html

Checked server time, its ok. Cleared browser cache many many times. Rebooted Nagios Server.

So I cannot resolve this issue. Only on day 5 of using Nagios and nobody can log in owing to this message. Please someone help!!

benjaminsmith · Post by **benjaminsmith** » Mon Mar 15, 2021 3:56 pm

Hi,

That error is usually related to the time settings. Please post the output of the following commands?

Code: Select all

grep "date.timezone" /etc/php.ini
ls -l /etc/localtime
date 
php -r 'echo date("D M j G:i:s T Y")."\n";'

Also, select F12 for the developer tools, and then try logging in and post a screenshot of the Network Tab. Are you seeing any errors in the status column?

--Benjamin

willsm · Post by **willsm** » Tue Mar 16, 2021 4:03 am

will@poc1vm:~$ grep "date.timezone" /etc/php.ini
grep: /etc/php.ini: No such file or directory
will@poc1vm:~$ ls -l /etc/localtime
lrwxrwxrwx 1 root root 33 Mar 15 15:44 /etc/localtime -> /usr/share/zoneinfo/Europe/London
will@poc1vm:~$ date
Tue 16 Mar 09:02:30 GMT 2021
will@poc1vm:~$ php -r 'echo date("D M j G:i:s T Y")."\n";'
Tue Mar 16 9:02:30 UTC 2021
will@poc1vm:~$

willsm · Post by **willsm** » Tue Mar 16, 2021 4:07 am

See attached Screenshot

willsm · Post by **willsm** » Tue Mar 16, 2021 4:14 am

Also, see this output:

will@poc1vm:~$ grep "date.timezone" /etc/php/7.4/cli/php.ini
; http://php.net/date.timezone
;date.timezone = Europe/London
will@poc1vm:~$ grep "date.timezone" /etc/php/7.4/apache2/php.ini
; http://php.net/date.timezone
date.timezone = Europe/London
will@poc1vm:~$

benjaminsmith · Post by **benjaminsmith** » Tue Mar 16, 2021 5:07 pm

Hi,

Thanks for checking that. The timezone looks good but It's definitely not loading. Do you have any type of security hardening enabled or proxy server setup? Did it ever work when you installed the software?

Is SELinux enabled?

Code: Select all

sestatus

Are you able to curl the server address successfully?

Code: Select all

curl -k -L -v https://<server-ip-address/

willsm · Post by **willsm** » Wed Mar 17, 2021 4:32 am

Hi,

Okay so I have found that if I clear my browser cache, I can get in.

However this maybe only stays OK for a day. Yesterday I could log in ok. This morning I could not, got the message. So I cleared the cache and now I can get in.

So it is related to cookies?

See output:

will@poc1vm:~$ sestatus
SELinux status: disabled
will@poc1vm:~$ curl -k -L -v https://7.7.255.84/
* Trying 7.7.255.84:443...
* TCP_NODELAY set
* Connected to 7.7.255.84 (7.7.255.84) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
* CAfile: /etc/ssl/certs/ca-certificates.crt
CApath: /etc/ssl/certs
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
* TLSv1.3 (IN), TLS handshake, Certificate (11):
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
* TLSv1.3 (IN), TLS handshake, Finished (20):
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.3 (OUT), TLS handshake, Finished (20):
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN, server accepted to use http/1.1
* Server certificate:
* subject: C=US; ST=Minnesota; L=St. Paul; O=Nagios Enterprises; OU=Development; CN=7.7.255.84
* start date: Mar 10 12:50:42 2021 GMT
* expire date: Mar 8 12:50:42 2031 GMT
* issuer: C=US; ST=Minnesota; L=St. Paul; O=Nagios Enterprises; OU=Development; CN=7.7.255.84
* SSL certificate verify result: self signed certificate (18), continuing anyway.
> GET / HTTP/1.1
> Host: 7.7.255.84
> User-Agent: curl/7.68.0
> Accept: */*
>
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* old SSL session ID is stale, removing
* Mark bundle as not supporting multiuse
< HTTP/1.1 200 OK
< Date: Wed, 17 Mar 2021 09:30:09 GMT
< Server: Apache/2.4.41 (Ubuntu)
< Vary: Accept-Encoding
< Content-Length: 3245
< Content-Type: text/html; charset=UTF-8
<
<!DOCTYPE HTML>
<html>
<head>
<title>Nagios XI</title>
<meta name="ROBOTS" content="NOINDEX, NOFOLLOW">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<link rel="icon" type="image/png" href="/nagiosxi/images/favicon-32x32.png" sizes="32x32">
<link rel="shortcut icon" href="/nagiosxi/images/favicon.ico" type="image/ico">
<link rel="apple-touch-icon-precomposed" href="/nagiosxi/images/apple-touch-icon-precomposed.png">
<link rel="apple-touch-icon" href="/nagiosxi/images/apple-touch-icon.png">
<LINK REL='stylesheet' TYPE='text/css' HREF='/nagiosxi/includes/css/bootstrap.3.min.css'>
<LINK REL='stylesheet' TYPE='text/css' HREF='/nagiosxi/includes/css/base.css'>
<LINK REL='stylesheet' TYPE='text/css' HREF='/nagiosxi/includes/css/themes/modern.css'>
<script type='text/javascript' src='/nagiosxi/includes/js/jquery/jquery-3.5.1.min.js'></script>
<script type='text/javascript' src='/nagiosxi/includes/js/core.js'></script>
</head>
<body>

<div class="parentpage">

<div id="header">
<div id="toplogo">
<a href="/nagiosxi">
<img src="/nagiosxi/images/nagios_logo_white_transbg.png" border="0" class="xi-logo" alt="Nagios XI" title="Nagios XI"> XI
</a>
</div>
</div>

<div id="mainframe" style="padding: 20px 30px;">

<h1>Welcome</h1>
<p>Click the link below to get started using Nagios XI.</p>

<div style="margin: 20px 0 30px 0;"><a href="/nagiosxi/" class="btn btn-sm btn-primary"><b>Access Nagios XI</b></a></div>

<p>
Check for tutorials and updates by visiting the Nagios Library at <a href="http://library.nagios.com" target="_blank" rel="noreferrer"><b>library.nagios.com</b></a>.
</p>
<p>
Problems, comments, etc, should be directed to our support forum at <a href="http://support.nagios.com/forum/" target="_blank" rel="noreferrer"><b>support.nagios.com/forum/</b></a>.
</p>

</div>

<div id="footer">
<div class="container-fluid">
<div class="row">
<div class="col-sm-6 footer-left">
<strong>Nagios XI</strong>
</div>
<div class="col-sm-6 footer-right">
<a href="/nagiosxi/about/">About</a> |
<a href="/nagiosxi/about/?legal">Legal</a> |
Copyright © 2008-2021 <a href="http://www.nagios.com/" target="_blank" rel="noreferrer">Nagios Enterprises, LLC</a>
</div>
</div>
</div>
</div>

</div>

<noframes>

<h2>Nagios XI</h2>
<p align="center">
<a href="http://www.nagios.com/">www.nagios.com</a><br>
Copyright (c) 2009-2021 Nagios Enterprises, LLC
</p>
<p>
<i>Note: These pages require a browser which supports frames</i>
</p>
</noframes>

</body>
* Connection #0 to host 7.7.255.84 left intact

Post by **lmiltchev** » Wed Mar 17, 2021 4:23 pm

Normally, you shouldn't be seeing this messages so often. At the end of the day, do you log out or put your computer to sleep? If you do, this would mean that you are trying to re-submit a form with the wrong info. This is not an error that we see often at all in support, so it has to be something unique to your environment or the way you log in/out of Nagios XI.

Nagios Support Forum

NSP: Sorry Dave, I can’t let you do that

NSP: Sorry Dave, I can’t let you do that

Re: NSP: Sorry Dave, I can’t let you do that

Re: NSP: Sorry Dave, I can’t let you do that

Re: NSP: Sorry Dave, I can’t let you do that

Re: NSP: Sorry Dave, I can’t let you do that

Re: NSP: Sorry Dave, I can’t let you do that

Re: NSP: Sorry Dave, I can’t let you do that

Re: NSP: Sorry Dave, I can’t let you do that