Nagios Support Forum

When trying to update, were you using the nagios, or root account?

Additionally, is there any kind of custom security rules setup on this box?

Please take the attached files and replace these:
Then restart httpd:
Make sure that you go to Admin > System Settings and change your Program URL (and External URL if you have it set) from http:// to https:// then click the Update Settings button.

Also, make sure that you go to Configure > Core Config Manager > Config Manager Admin > Config Manager Settings and set Server Protocol to HTTPS, then click the Save button.

Let us know if that works for you.


Thank you

These do not work. i get errors trying to browser to nagiosxi.lifelock.com/nagiosxi/ after this. What options are you trying to update? this seemed to update all the virtualhost syntax for 80/443 away from what is recommended in the documentation.

This is my error:

Forbidden

You don't have permission to access /nagiosxi/ on this server.

Apache/2.2.15 (Red Hat) Server at nagiosxi.lifelock.com Port 443

It seems to revolve around trying to put the redirect in httpd.conf instead of nagiosxi.conf

[Wed Nov 25 16:23:20 2015] [error] [client 10.21.9.246] Options FollowSymLinks or SymLinksIfOwnerMatch is off which implies that RewriteRule directive is forbidden: /usr/local/nagiosxi/html/ajaxhelper.php, referer: https://nagiosxi.lifelock.com/nagiosxi/ ... ow=api.php
[Wed Nov 25 16:23:23 2015] [error] [client 127.0.0.1] Options FollowSymLinks or SymLinksIfOwnerMatch is off which implies that RewriteRule directive is forbidden: /usr/local/nagiosxi/html/backend/
[Wed Nov 25 16:23:44 2015] [error] [client 127.0.0.1] Options FollowSymLinks or SymLinksIfOwnerMatch is off which implies that RewriteRule directive is forbidden: /usr/local/nagiosxi/html/backend/
[Wed Nov 25 16:23:45 2015] [error] [client 10.21.9.246] Options FollowSymLinks or SymLinksIfOwnerMatch is off which implies that RewriteRule directive is forbidden: /usr/local/nagiosxi/html/
[Wed Nov 25 16:23:46 2015] [error] [client 10.21.9.246] File does not exist: /var/www/html/favicon.ico, referer: https://nagiosxi.lifelock.com/nagiosxi/
[Wed Nov 25 16:23:48 2015] [error] [client 10.21.9.246] Options FollowSymLinks or SymLinksIfOwnerMatch is off which implies that RewriteRule directive is forbidden: /usr/local/nagiosxi/html/
[Wed Nov 25 16:23:57 2015] [error] [client 10.31.11.21] Options FollowSymLinks or SymLinksIfOwnerMatch is off which implies that RewriteRule directive is forbidden: /usr/local/nagiosxi/html/login.php
[Wed Nov 25 16:24:03 2015] [error] [client 127.0.0.1] Options FollowSymLinks or SymLinksIfOwnerMatch is off which implies that RewriteRule directive is forbidden: /usr/local/nagiosxi/html/backend/
[Wed Nov 25 16:24:23 2015] [error] [client 127.0.0.1] Options FollowSymLinks or SymLinksIfOwnerMatch is off which implies that RewriteRule directive is forbidden: /usr/local/nagiosxi/html/backend/
[Wed Nov 25 16:24:44 2015] [error] [client 127.0.0.1] Options FollowSymLinks or SymLinksIfOwnerMatch is off which implies that RewriteRule directive is forbidden: /usr/local/nagiosxi/html/backend/
[Wed Nov 25 16:24:45 2015] [error] [client 10.21.9.246] Options FollowSymLinks or SymLinksIfOwnerMatch is off which implies that RewriteRule directive is forbidden: /usr/local/nagiosxi/html/
[Wed Nov 25 16:24:54 2015] [error] [client 10.31.11.21] Options FollowSymLinks or SymLinksIfOwnerMatch is off which implies that RewriteRule directive is forbidden: /usr/local/nagiosxi/html/login.php

ssax wrote:Make sure that you go to Admin > System Settings and change your Program URL (and External URL if you have it set) from http:// to https:// then click the Update Settings button.

doneil326 wrote:These do not work. i get errors trying to browser to nagiosxi.lifelock.com/nagiosxi/ after this.

What is in the "Program URL" and "External URL" fields?

programurl is https://nagiosxi.lifelock.com/nagiosxi/

externalurl is blank as we are not using it this externally.

Does nagiosxi.lifelock.com resolve to an internal IP address or an external IP address?

What does this report when executed on the XI server:

it resolves to an internal ip address

Can you run the following command and show the output?

#
# This configuration file enables the default "Welcome"
# page if there is no default index page present for
# the root URL. To disable the Welcome page, comment
# out all the lines below.
#
<LocationMatch "^/+$">
Options -Indexes
ErrorDocument 403 /error/noindex.html
</LocationMatch>