User is denied access to a service

[uidaho]

Good afternoon.

A group of my users are unable to access properties of a service that I meant for them to (in XI). When they click on the name of the service the get "Not Authorized \ You are not authorized to view the requested object, or the object does not exist." instead of getting to the page where they can do things like disable notifications or view the graphs. As an admin, I have trouble getting to the properties page. They can SEE the service, such as in a search or dashboard.

There are other services configured the same way that they do have access to. Both have the same relationships and contact settings in Core Config.

What can I look at to troubleshoot this?

Thank you!

David

[uidaho]

Here are the entries in Core for a service that does not work and one that does:

itsbill01p MIS Oracle DBCheck pinnpp 3 0h 3m 0s 0h 1m 0s check_xi_oracle_DB!pinnpp!!!!!!! xi_timeperiod_24x7 Yes No Yes Yes Yes No Auto-determined value DbaPager_CG Yes 0h 10m 0s 0h 0m 0s Unknown, Warning, Critical, Recovery, Flapping, Downtime ui_timeperiod_8x5 Yes None No Program-wide value Program-wide value Ok, Warning, Unknown, Critical Yes Yes Status Information, Non-Status Information



BannerDBS1 MIS Oracle DBCheck seed 3 0h 3m 0s 0h 1m 0s check_xi_oracle_DB!seed!!!!!!! xi_timeperiod_24x7 Yes No Yes Yes Yes No Auto-determined value DbaPager_CG Yes 0h 10m 0s 0h 0m 0s Unknown, Warning, Critical, Recovery, Flapping, Downtime ui_timeperiod_8x5 Yes None No Program-wide value Program-wide value Ok, Warning, Unknown, Critical Yes Yes

[slansing]

Have you tried assigning their contact's to those objects? What authorization do they have in the cgi.cfg file?

Code: Select all

/usr/local/nagios/etc/cgi.cfg

[uidaho]

They have "authorized_for_all_host_commands" and "authorized_for_all_service_commands".

I will assign the contact objects directly to test, but I will need to go through a contact group in the end. And this should work, since it is working for some services (such as "MIS Oracle DBCheck seed").

[uidaho]

Adding the user's contact object directly to the service's alert settings did not fix the problem.

[BanditBBS]

Capture.JPG

You have standard selected right? I had this issue once before when somehow a couple services had NULL selected.

[slansing]

Let us know what turns up uidaho.

[uidaho]

Yes - "standard" is selected under contact groups for services that are working as expected and for those that are not.

[abrist]

What version of XI are you running?

[uidaho]

2012r2.2

We will be upgrading to 2012r2.5 later this week.

Thank you

David