Can't Acknowledge or Schedule Down Time (Not Authorized)

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
mguthrie
Posts: 4380
Joined: Mon Jun 14, 2010 10:21 am

Re: Can't Acknowledge or Schedule Down Time (Not Authorized)

Post by mguthrie »

Can you try going to the Admin->Reset Security Credentials page and resetting the backend credentials. Is the username displaying correctly in the XI interface (top right)?
espint
Posts: 29
Joined: Thu Mar 03, 2011 12:06 pm

Re: Can't Acknowledge or Schedule Down Time (Not Authorized)

Post by espint »

The user name is displaying correctly in the upper left corner. I reset the backend credentials and this did not resolve the problem.

I would have responded sooner, but I did not realize that your post was on page 2. I figured it out when I posted a "Are you There" and it appeared on page 2 behind your post. If you got the "Are You There" post disregard it as I am being an idiot. :oops:
User avatar
nscott
Posts: 1040
Joined: Wed May 11, 2011 8:54 am

Re: Can't Acknowledge or Schedule Down Time (Not Authorized)

Post by nscott »

espint,

Can you navigate to the the actual Nagios Core page?

http://<yourserver>/nagios

Do you have to log in to view the page? Or does it just display the page without asking for login details?
Nicholas Scott
Former Nagios employee
espint
Posts: 29
Joined: Thu Mar 03, 2011 12:06 pm

Re: Can't Acknowledge or Schedule Down Time (Not Authorized)

Post by espint »

I can not login to [myserver]/nagios I get the webpage cannot be found error. http 404
User avatar
lmiltchev
Bugs find me
Posts: 13589
Joined: Mon May 23, 2011 12:15 pm

Re: Can't Acknowledge or Schedule Down Time (Not Authorized)

Post by lmiltchev »

Is your apache running? Try:

Code: Select all

# service httpd status
Are you suing the right IP address for your Nagios server?
Be sure to check out our Knowledgebase for helpful articles and solutions!
espint
Posts: 29
Joined: Thu Mar 03, 2011 12:06 pm

Re: Can't Acknowledge or Schedule Down Time (Not Authorized)

Post by espint »

httpd is running... and I confirmed is with the command. I am certain I'm using the right IP address. Most of NagiosXI is working but just these few things. I get text message and e-mail alerts as I should. Passive Event Log services also work great. Google map and Hyper map work fine. I monitor 54 hosts 273 services with no other issues except that my boss has also informed me that he cant get any reports to function. All these things worked a few versions ago, should I consider rolling back to an earlier version. I'm on 2011R1.6 Thanks.
mguthrie
Posts: 4380
Joined: Mon Jun 14, 2010 10:21 am

Re: Can't Acknowledge or Schedule Down Time (Not Authorized)

Post by mguthrie »

Can you show us the contents of your /etc/httpd/conf.d/nagios.conf file, and also verify that the /usr/local/nagiosxi/etc/htpasswd.users file has at least the nagiosadmin username in it?
espint
Posts: 29
Joined: Thu Mar 03, 2011 12:06 pm

Re: Can't Acknowledge or Schedule Down Time (Not Authorized)

Post by espint »

I am sorry this is becoming so drawn out. I have a lot of projects going. The /usr/local/nagiosxi/etc/htpasswd.users file has noagiosadmin username in it, as well as all my other usernames.

Thanks for your help.

The contents of my /etc/httpd/conf.d/nagios.conf file is as follows:

# SAMPLE CONFIG SNIPPETS FOR APACHE WEB SERVER
# Last Modified: 11-26-2005
#
# This file contains examples of entries that need
# to be incorporated into your Apache web server
# configuration file. Customize the paths, etc. as
# needed to fit your system.

#NameVirtualHost *:443
<VirtualHost *:80> # Add this line
<Directory "/usr/local/nagiosxi/html">
# SSLRequireSSL
Options None
AllowOverride None
Order allow,deny
Allow from all
# Order deny,allow
# Deny from all
# Allow from 127.0.0.1
# AuthName "Nagios XI"
# AuthType Basic
# AuthUserFile /usr/local/nagiosxi/etc/htpasswd.users
# Require valid-user
</Directory> # Add this line
</VirtualHost>

<VirtualHost *:443>
SSLEngine on
SSLCertificateFile /etc/pki/tls/certs/nagiosxi.espint.com.crt
SSLCertificateKeyFile /etc/pki/tls/private/nagiosxi.espint.com.key
<Directory "/usr/local/nagiosxi/html">
AllowOverride All
</Directory>
</VirtualHost>
Alias /nagiosxi "/usr/local/nagiosxi/html"

ScriptAlias /nagios/cgi-bin "/usr/local/nagios/sbin"

<Directory "/usr/local/nagios/sbin">
# SSLRequireSSL
Options ExecCGI
AllowOverride None
Order allow,deny
Allow from all
# Order deny,allow
# Deny from all
# Allow from 127.0.0.1
AuthName "Nagios Core"
AuthType Basic
AuthUserFile /usr/local/nagiosxi/etc/htpasswd.users
Require valid-user
</Directory>
User avatar
lmiltchev
Bugs find me
Posts: 13589
Joined: Mon May 23, 2011 12:15 pm

Re: Can't Acknowledge or Schedule Down Time (Not Authorized)

Post by lmiltchev »

In your /usr/local/nagios/etc/cgi.cfg file, do you have a line that reads?

Code: Select all

use_ssl_authentication=1
Did you follow this document while configuring ssl?

http://assets.nagios.com/downloads/nagi ... ios_XI.pdf
Be sure to check out our Knowledgebase for helpful articles and solutions!
espint
Posts: 29
Joined: Thu Mar 03, 2011 12:06 pm

Re: Can't Acknowledge or Schedule Down Time (Not Authorized)

Post by espint »

Good Morning. my/usr/local/nagios/etc/cgi.cfg file does contain a line that reads use_ssl_authentication=1

I did follow the document Configuring_SSL_with_Nagios_XI.pdf

XI logon screen goes blank when I do this step from the configuration document:

Now we will need to edit some Nagios XI files. First thing we'll start off with is editing /usr/local/nagiosxi/html/config.inc.php. Open
that file in a text-editor and add this line under $cfg['base_url']=”/nagiosxi”;

$cfg['use_https']=true;


If I remove this line I can use XI with http or https. I notice that the Nagiosxi.conf file is not like the one in the ssl configuration document, so I have change it to match. Both problems still exist, I can't enter any username fields in XI and https is not required. Are these two tied together somehow. The Certificate nagiosxi.espint.com.crt and the Key nagiosxi.espint.com.key do exist in the directory specified in the nagios.conf file. These are certificates from GoDaddy.

The nagios.conf file now reads:

# SAMPLE CONFIG SNIPPETS FOR APACHE WEB SERVER
# Last Modified: 11-26-2005
#
# This file contains examples of entries that need
# to be incorporated into your Apache web server
# configuration file. Customize the paths, etc. as
# needed to fit your system.

#NameVirtualHost *:443

<VirtualHost *:80> # Add this line
<Directory "/usr/local/nagiosxi/html">
# SSLRequireSSL
Options None
AllowOverride None
Order allow,deny
Allow from all
# Order deny,allow
# Deny from all
# Allow from 127.0.0.1
# AuthName "Nagios XI"
# AuthType Basic
# AuthUserFile /usr/local/nagiosxi/etc/htpasswd.users
# Require valid-user
</Directory> # Add this line
</VirtualHost>

<VirtualHost *:443>
SSLEngine on
SSLCertificateFile /etc/pki/tls/certs/nagiosxi.espint.com.crt
SSLCertificateKeyFile /etc/pki/tls/private/nagiosxi.espint.com.key
<Directory "/usr/local/nagiosxi/html">
AllowOverride All
</Directory>
</VirtualHost>
Alias /nagiosxi "/usr/local/nagiosxi/html"

NameVirtualHost *.443
Locked