Page 2 of 2

Re: web service that uses client certificates

Posted: Tue Jan 19, 2016 4:05 pm
by tdang
permission is 777

Re: web service that uses client certificates

Posted: Wed Jan 20, 2016 10:15 am
by rkennedy
Can you run the actual ls -l /usr/local/nagiosxi command and post the result?

Re: web service that uses client certificates

Posted: Wed Jan 20, 2016 11:00 am
by awang
output:

Code: Select all

lrwxrwxrwx 1 nagios nagios 14 Jan 18 16:50 /usr/local/nagiosxi -> /data/nagiosxi

Re: web service that uses client certificates

Posted: Wed Jan 20, 2016 6:08 pm
by rkennedy
Since it's linked, can you run this? -

Code: Select all

ls -l /data/nagiosxi

Re: web service that uses client certificates

Posted: Thu Jan 21, 2016 9:34 am
by awang
output:

Code: Select all

[awang@lltcnagios-sed02 ~]$ ls -l /data/nagiosxi
total 56
drwxr-xr-x  2 nagios nagios 4096 Jun  5  2015 cron
drwxr-xr-x  3 nagios nagios 4096 Jun  5  2015 etc
drwxr-xr-x 19 nagios nagios 4096 Jan 18 18:24 html
-rwxrwxrwx  1 root   root   4424 Nov 12 15:57 NagiosCertificate.pem
-rwxr--r--  1 root   root   8952 Nov 12 15:57 NagiosCert.pem
-rw-r--r--  1 root   root      0 Nov 12 15:57 NagiosCert.pvk
-rwxrwxrwx  1 root   root   1679 Nov 12 15:57 NagiosKey.pem
drwxr-xr-x  3 nagios nagios 4096 Jun  5  2015 nom
drwxr-xr-x  2 nagios nagios 4096 Jan 20 10:35 scripts
drwsrwsr-x  2 apache nagios 4096 Jan 19 15:07 tmp
drwxr-xr-x  2 nagios nagios 4096 Jun  5  2015 tools
drwxr-xr-x  5 nagios nagios 4096 Jan 21 08:30 var

Re: web service that uses client certificates

Posted: Thu Jan 21, 2016 10:33 am
by rkennedy
I think the issue is going to be the root:root permissions on those files. Can you change them to apache:nagios?

Code: Select all

-rwxrwxrwx  1 root   root   4424 Nov 12 15:57 NagiosCertificate.pem
-rwxr--r--  1 root   root   8952 Nov 12 15:57 NagiosCert.pem
-rw-r--r--  1 root   root      0 Nov 12 15:57 NagiosCert.pvk
-rwxrwxrwx  1 root   root   1679 Nov 12 15:57 NagiosKey.pem

Re: web service that uses client certificates

Posted: Thu Jan 21, 2016 3:31 pm
by tdang
We're still having the same issue after changing to apache.

[awang@lltcnagios-sed02 ~]$ ls -l /data/nagiosxi
-rwxrwxrwx 1 apache nagios 4424 Nov 12 15:57 NagiosCertificate.pem
-rwxrwxrwx 1 apache nagios 1679 Nov 12 15:57 NagiosKey.pem

Re: web service that uses client certificates

Posted: Thu Jan 21, 2016 3:35 pm
by rkennedy
This may be the root permissions then, can you verify what the permissions are on /data/nagiosxi, and /data/?