Remote access NCPA GUI posible?

[sgomeztd]

Hi,

I'm testing the NCPA agent as I'm preparing to replace our current mix of nsclient and nrpe and is not completelly clear to me if is possible to access the GUI that agents presents remotelly. I have installed the agent on a server but when I try to access the gui from my laptop using http://SERVER_IP:5693 I keep getting a connection refused.

I have tried editing different sections of the ncpa.cfg but so far I have not managed to access the GUI remotelly, only directly from the server using localhost.

[gsmith]

Hi,

On the server with the agent installed - could you please check
if port 5693 is open ? If you need help checking that please tell me the
OS that remote server is running.

Thanks

[sgomeztd]

Hi,

I have installed the ncpa agent on a Centos 8 and Windows w2k16 and Both have their firewall disabled and the agent listening. I can indeed add them to Nagiosxi using the NCPA wizard without issues.

Maybe there is some particular on the ncpa.cfg of the agent that needs to be edited? I have tried to find one of the option that might do the trick but so far no luck

[kfanselow]

Hi gomeztd,

I think the option your looking for is "allowed_hosts" which should be a comma separated list of host that are allowed access. For reference sake here's a link to the NCPA configuration doc:

https://www.nagios.org/ncpa/help/2.2/configuration.html

Generally speaking it's often a good idea to double check that it's listening on the interfaces you want as well:

Code: Select all

 netstat -na  | grep 5693

or

Code: Select all

ss -naut | grep 5693  

Hope this is useful.

Thanks and Best Regards,
Keith

[sgomeztd]

Hi,

I did some testing with that option before but after some checks I realiced that the problem is my infraestructure firewall/proxy blocking the access . I managed to make it work for an specific server but to make it work for a subnet I need to review my infraestructure.

Thank you for the help

[kfanselow]

Hi sgomeztd,

Glad you were able to resolve the problem. If there is nothing else we'll plan to lock the thread in about 24 hours.

Thanks and Best Regards,
Keith