Upgrade and status staying yellow

[mcapra]

Very strange behavior for sure. I'm unsure if it's specific to the RSS feed though. It could be that it's failing to authenticate the session and by happenstance throwing an error on that path.

I would log all the XHRs and see if that provides a specific point of failure. In Chrome:

2016_09_12_16_50_48_Dashboard_Nagios_Log_Server.png

[BanditBBS]

Came home and tried, got this on first attempt:

Code: Select all

Synchronous XMLHttpRequest on the main thread is deprecated because of its detrimental effects to the end user's experience. For more help, check https://xhr.spec.whatwg.org/.

Failed to load resource: the server responded with a status of 404 (Not Found)
ZeroClipboard error of type "flash-deactivated": Flash is too outdated for your browser and/or is configured as click-to-activate

Then saw your reply and did that logging and nothing new logged.

[BanditBBS]

Scratch that, reloaded again and got the other error, so much more logged:

Code: Select all

Navigated to http://naglog.itciss.com/nagioslogserver/
XHR finished loading: GET "http://naglog.itciss.com/nagioslogserver/dashboard/do_update_check".
XHR finished loading: POST "http://naglog.itciss.com/nagioslogserver/api/system/status".
XHR finished loading: POST "http://naglog.itciss.com/nagioslogserver/api/system/status".
XHR finished loading: POST "http://naglog.itciss.com/nagioslogserver/api/user/get_dashboards".
XHR finished loading: POST "http://naglog.itciss.com/nagioslogserver/api/system/get_global_dashboards".
XHR finished loading: GET "http://naglog.itciss.com/nagioslogserver/dashboard/fetch_rss/marketing".
Synchronous XMLHttpRequest on the main thread is deprecated because of its detrimental effects to the end user's experience. For more help, check https://xhr.spec.whatwg.org/.
XHR finished loading: GET "http://naglog.itciss.com/nagioslogserver/media/js/jquery-1.10.1.min.js?ver=1.4.2&_=1473718767950".
XHR finished loading: GET "http://naglog.itciss.com/nagioslogserver/media/js/jquery-ui-1.10.3.custom.min.js?ver=1.4.2&_=1473718767951".
XHR finished loading: GET "http://naglog.itciss.com/nagioslogserver/media/js/jquery-ui-timepicker-addon.js?ver=1.4.2&_=1473718767952".
XHR finished loading: GET "http://naglog.itciss.com/nagioslogserver/media/js/bootstrap.min.js?ver=1.4.2&_=1473718767953".
XHR finished loading: GET "http://naglog.itciss.com/nagioslogserver/media/js/prettify.js?ver=1.4.2&_=1473718767954".
XHR finished loading: GET "http://naglog.itciss.com/nagioslogserver/media/js/bootstrap-progressbar.js?ver=1.4.2&_=1473718767955".
XHR finished loading: GET "http://naglog.itciss.com/nagioslogserver/media/js/ZeroClipboard.js?ver=1.4.2&_=1473718767956".
XHR finished loading: GET "http://naglog.itciss.com/nagioslogserver/media/js/main.js?ver=1.4.2&_=1473718767957".
XHR finished loading: GET "http://naglog.itciss.com/nagioslogserver/media/js/help.js?ver=1.4.2&_=1473718767958".
XHR finished loading: POST "http://naglog.itciss.com/nagioslogserver/auth/set_redirect_hash".
XHR finished loading: POST "http://naglog.itciss.com/nagioslogserver/api/check/get_queries?cb=1473718769255".
GET http://naglog.itciss.com/nagioslogserver/ZeroClipboard.swf?noCache=1473718776990 404 (Not Found)

I'm also still stuck on the fact it seems to have started when I updated to 1.4.2.

[mcapra]

Can you share the output of:

Code: Select all

ls -al /var/www/html/nagioslogserver/www/media/js

Also try executing the following from the CLI of the NLS machine:

Code: Select all

curl -XPUT 'http://localhost:9200/nagioslogserver/user/99' -d '{"username":"someuser","password":"c678bcf3b5138b9263a95c44d28097f22c2e02877193d2c25313478821d45c19","auth_type":"admin","email":"[email protected]","language":"default","apiaccess":"1","apikey":"1396e08757545557073844695e5b64caa0bd3ad3","created":"2015-01-23 10:00:00","created_by":0,"default_dashboard":"/dashboard/elasticsearch/default"}'

This will create a user named "someuser" with the password "nagiosls". See if logging in with this newly created account changes anything.

[BanditBBS]

The new user acts the exact same.

Here is the output requested:

Code: Select all

drwxrwxr-x 2 root apache   4096 Jan 20  2016 .
drwxrwxr-x 8 root apache   4096 Jan 20  2016 ..
-rw-rwxr-- 1 root apache  28756 Sep 12 08:43 bootstrap.min.js
-rw-rwxr-- 1 root apache   6069 Sep 12 08:43 bootstrap-progressbar.js
-rw-rwxr-- 1 root apache   2402 Sep 12 08:43 help.js
-rw-rwxr-- 1 root apache  93021 Sep 12 08:43 jquery-1.10.1.min.js
-rw-rwxr-- 1 root apache 228137 Sep 12 08:43 jquery-ui-1.10.3.custom.min.js
-rw-rwxr-- 1 root apache  74018 Sep 12 08:43 jquery-ui-timepicker-addon.js
-rw-rwxr-- 1 root apache    868 Sep 12 08:43 lang-css.js
-rw-rwxr-- 1 root apache   1802 Sep 12 08:43 lang-sql.js
-rw-rwxr-- 1 root apache  12638 Sep 12 08:43 main.js
-rw-rwxr-- 1 root apache  14551 Sep 12 08:43 prettify.js
-rw-rwxr-- 1 root apache  16682 Sep 12 08:43 run_prettify.js
-rw-rwxr-- 1 root apache  74328 Sep 12 08:43 ZeroClipboard.js
-rwxrwxr-x 1 root apache   4036 Sep 12 08:43 ZeroClipboard.swf

[mcapra]

Looking more into this issue, it's definitely related to the 1.4.2 upgrade. We changed a few things on the back-end to mitigate a XSS vulnerability which is likely what's giving you grief.

See this thread for a potential solution:
https://support.nagios.com/forum/viewto ... 37&t=39513

The answer from development on this topic was "NLS doesn't allow you to float freely between instances in a cluster" since the XSS patch. Enabling persistent connection was another possible solution.

[BanditBBS]

That same fix he did fixed mine. You can close this, thanks!