Nagios Support Forum

Posted: **Wed Feb 22, 2017 1:05 am**

There is no reason why I used version 5.2.9. I'm evaluating Nagios XI few months back, then stop for a couple of months to do other project. Then back to this evaluation as this project is about to kick start.

I'm doing an offline installation. I've already setup the whole monitoring for the project, though just about 50 nodes, once I got this issue resolve, I'm good to start.

Can you see where the issue lies with? If I need to do another offline installation, will all my current setup effected?

Posted: **Wed Feb 22, 2017 5:17 pm**

If you do another Offline install, you would run the upgrade instead and that should leave your current settings intact.

Can you login to the server as root, run the following commands and post the output?

Code: Select all

ls -l /usr/local/nagios/var/rw/
ls -l /usr/local/nagiosxi/
ls -l /usr/local/nagiosxi/tmp
ls -l /usr/local/nagiosxi/var

Can you post this file from the server?

Code: Select all

/usr/local/nrdp/server/config.inc.php

When you installed the server, was there any customization done to the system?
Directory paths changed, etc...?

Posted: **Sun Feb 26, 2017 8:15 pm**

ls -l /usr/local/nagios/var/rw/

Code: Select all

total 0
prw-rw---- 1 nagios nagios 0 Feb 20 17:54 nagios.cmd
srw-rw---- 1 nagios nagios 0 Feb 10 14:20 nagios.qh

ls -l /usr/local/nagiosxi/

Code: Select all

total 20
drwxr-xr-x.  2 nagios nagios 4096 Feb  7 10:54 cron
drwxr-xr-x.  3 nagios nagios   44 Oct 21 20:21 etc
drwxr-xr-x. 19 nagios nagios 4096 Oct 21 20:21 html
drwxr-xr-x.  3 nagios nagios   24 Oct 21 20:21 nom
drwxr-xr-x.  2 nagios nagios 4096 Feb 24 13:49 scripts
drwsrwsr-x.  2 apache nagios    6 Feb 15 11:06 tmp
drwxr-xr-x.  2 nagios nagios 4096 Jan 26 09:41 tools
drwxr-xr-x.  5 nagios nagios 4096 Feb 24 16:26 var

ls -l /usr/local/nagiosxi/tmp/

Code: Select all

total 0

ls -l /usr/local/nagiosxi/var/

Code: Select all

total 296
-rw-r--r--  1 nagios users    362 Feb 24 16:27 cleaner.log
-rw-r--r--  1 nagios users    362 Jan 20 07:59 cleaner.log-20170122
-rw-r--r--  1 nagios users    362 Feb  7 03:41 cleaner.log-20170207
-rw-r--r--  1 nagios users    362 Feb 12 03:31 cleaner.log-20170212
-rw-r--r--  1 nagios users    362 Feb 19 03:49 cleaner.log-20170219
-rw-r--r--  1 nagios users     79 Feb 24 16:27 cmdsubsys.log
-rw-r--r--  1 nagios users     80 Jan 20 08:00 cmdsubsys.log-20170122
-rw-r--r--  1 nagios users     81 Feb  7 03:42 cmdsubsys.log-20170207
-rw-r--r--  1 nagios users     80 Feb 12 03:32 cmdsubsys.log-20170212
-rw-r--r--  1 nagios users     81 Feb 19 03:50 cmdsubsys.log-20170219
drwsrwsr-x. 2 apache nagios     6 Feb 10 09:27 components
-rw-r--r--. 1 nagios users      7 Feb 24 16:27 corelog.data
-rw-r--r--. 1 nagios users    165 Feb 24 16:27 corelog.diff
-rwxrwxr-x  1 nagios nagios     6 Feb  3 13:35 corelog.newobjects
-rw-r--r--  1 nagios users  10451 Feb 24 16:26 dbmaint.log
-rw-r--r--  1 nagios users   2625 Jan 20 07:55 dbmaint.log-20170122
-rw-r--r--  1 nagios users   2625 Feb  7 03:40 dbmaint.log-20170207
-rw-r--r--  1 nagios users   2625 Feb 12 03:30 dbmaint.log-20170212
-rw-r--r--  1 nagios users   2625 Feb 19 03:45 dbmaint.log-20170219
-rw-r--r--  1 nagios users     75 Feb 24 16:25 deadpool.log
-rw-r--r--  1 nagios users     75 Jan 20 07:55 deadpool.log-20170122
-rw-r--r--  1 nagios users     75 Feb  7 03:40 deadpool.log-20170207
-rw-r--r--  1 nagios users     75 Feb 12 03:30 deadpool.log-20170212
-rw-r--r--  1 nagios users     75 Feb 19 03:45 deadpool.log-20170219
-rw-r--r--  1 nagios users  11959 Feb 24 16:27 eventman.log
-rw-r--r--  1 nagios users  19114 Jan 20 08:00 eventman.log-20170122
-rw-r--r--  1 nagios users  11969 Feb  7 03:42 eventman.log-20170207
-rw-r--r--  1 nagios users  11959 Feb 12 03:32 eventman.log-20170212
-rw-r--r--  1 nagios users   9574 Feb 19 03:50 eventman.log-20170219
-rw-r--r--  1 nagios users     25 Feb 24 16:27 feedproc.log
-rw-r--r--  1 nagios users     25 Jan 20 08:00 feedproc.log-20170122
-rw-r--r--  1 nagios users     25 Feb  7 03:42 feedproc.log-20170207
-rw-r--r--  1 nagios users     25 Feb 12 03:32 feedproc.log-20170212
-rw-r--r--  1 nagios users     25 Feb 19 03:50 feedproc.log-20170219
-rw-r--r--  1 nagios users    976 Feb 24 16:27 load_url.log
-rw-r--r--  1 nagios users   1014 Jan  6 19:56 load_url.log-20170108
-rw-r--r--  1 nagios users    978 Feb 11 03:36 load_url.log-20170211
-rw-r--r--  1 nagios users    976 Feb 12 03:31 load_url.log-20170212
-rw-r--r--  1 nagios users    978 Feb 19 03:49 load_url.log-20170219
-rw-r--r--. 1 nagios users      0 Feb 24 16:27 nom.log
-rw-r--r--  1 nagios users     81 Feb 24 16:27 perfdataproc.log
-rw-r--r--  1 nagios users     81 Jan 20 08:00 perfdataproc.log-20170122
-rw-r--r--  1 nagios users     81 Feb  7 03:42 perfdataproc.log-20170207
-rw-r--r--  1 nagios users     81 Feb 12 03:32 perfdataproc.log-20170212
-rw-r--r--  1 nagios users     81 Feb 19 03:50 perfdataproc.log-20170219
-rw-r--r--  1 nagios users    273 Feb 24 16:01 recurringdowntime.log
-rw-r--r--  1 nagios users    273 Jan 20 07:01 recurringdowntime.log-20170122
-rw-r--r--  1 nagios users    273 Feb  7 03:01 recurringdowntime.log-20170207
-rw-r--r--  1 nagios users    273 Feb 12 03:01 recurringdowntime.log-20170212
-rw-r--r--  1 nagios users    273 Feb 19 03:01 recurringdowntime.log-20170219
-rw-r--r--. 1 nagios users      0 Feb 24 16:27 reportengine.log
drwxr-xr-x. 2 nagios nagios    47 Feb 10 14:20 subsys
-rw-r--r--  1 nagios users   8083 Feb 24 16:27 sysstat.log
-rw-r--r--  1 nagios users   8075 Jan 20 08:00 sysstat.log-20170122
-rw-r--r--  1 nagios users   8071 Feb  7 03:42 sysstat.log-20170207
-rw-r--r--  1 nagios users   8078 Feb 12 03:32 sysstat.log-20170212
-rw-r--r--  1 nagios users   8041 Feb 19 03:50 sysstat.log-20170219
drwxr-xr-x. 2 nagios nagios     6 Oct 21 20:21 upgrades
-rw-r--r--. 1 nagios nagios  6572 Oct 21 20:21 xi-sys.cfg
-rw-r--r--. 1 nagios nagios   195 Oct 21 20:21 xiversion

/usr/local/nrdp/server/config.inc.php

Code: Select all

<?php
// NRDP Config File
// Copyright (c) 2010 Nagios Enterprises, LLC.
// License: Nagios Open Software License <http://www.nagios.com/legal/licenses>
//
// $Id$


// an array of one or more tokens that are valid for this NRDP install
// a client request must contain a valid token in order for the NRDP to response or honor the request
// NOTE: tokens are just alphanumeric strings - make them hard to guess!
$cfg['authorized_tokens']=array("xxxx",);

// do we require that HTTPS be used to access NRDP?
// set this value to 'false' to disable HTTPS requirement
$cfg["require_https"]=false;

// do we require that basic authentication be used to access NRDP?
// set this value to 'false' to disable basic auth requirement
$cfg["require_basic_auth"]=false;

// what basic authentication users are allowed to access NRDP?
// comment this variable out to allow all authenticated users access to the NRDP
$cfg["valid_basic_auth_users"]=array();

// the name of the system group that has write permissions to the external command file
// this group is also used to set file permissions when writing bulk commands or passive check results
// NOTE: both the Apache and Nagios users must be a member of this group
$cfg["nagios_command_group"]="nagcmd";

// full path to Nagios external command file
$cfg["command_file"]="/usr/local/nagios/var/rw/nagios.cmd";

// full path to check results spool directory
$cfg["check_results_dir"]="/usr/local/nagios/var/spool/checkresults";

// full path to directory where temp scratch files can be written
// NOTE: the Apache user need to be able create files here, and the Nagios user needs to read/delete those same files, so the /tmp system directory won't work (it has a sticky bit on it)
$cfg["tmp_dir"]="/usr/local/nagiosxi/tmp";

// Should we allow external commands? Set to TRUE or FALSE (Boolean, not a string)
$cfg["disable_external_commands"]=false;

///////// DONT MODIFY ANYTHING BELOW THIS LINE /////////

$cfg['product_name']='nrdp';
$cfg['product_version']='1.3.1';

The Nagios Server is installed with Redhat 7.1 with OS hardening. No other customization done to the system.

Posted: **Mon Feb 27, 2017 10:21 am**

The strange thing is that when you connected to the server and submitted a command, there was no log of it in the Apache log files. Normally you would see something in there.
Can you describe what was done for the OS hardening?
Was SSL enabled on the server?

Posted: **Mon Feb 27, 2017 8:56 pm**

The hardening script is passed to me from our customer, so wouldn't be able to get the details of what is being hardened.

Normally we will have to know what is the cause of the issue, then do the softening as necessary.

Can you guide me the process to see what could be wrong?

How to check SSL is being enabled?

Also, is only unable for Nagios XI to display as Unconfigured Objects, I can receive the status from the client using tcpdump. Where does it stored in the log files and from the log files, how does it display to Unconfigured Objects?

Posted: **Tue Feb 28, 2017 1:07 am**

Well hardening will definetly affect an install. Hard to say what has happened once you've modified the XI install as there is nothing to review.

If your apache settings have been changed then that's pretty obvious as the logs aren't producing, and if other things are not working then it's probably permissions. Your best bet is starting from scratch and reviewing the hardening process, because changes to the system will affect the install.

Your other questions have articles @ https://support.nagios.com/kb/

Posted: **Tue Feb 28, 2017 8:42 pm**

Is it possible to let me know what settings are needed for Apache and what permissions needed for what files for Unconfigured Objects to appear so that I can verify on all these settings?

Posted: **Wed Mar 01, 2017 3:55 pm**

We would have to see the existing Apache configurations being leveraged. Most of the NRDP directives exist in /etc/httpd/conf.d/nrdp.conf, but this isn't accounting for any sort of additional hardening done against Apache itself.

If you can provide your entire apache configurations being used, we can take a look. But without knowing specifically what sort of hardening the script did, it's difficult to say definitively "we need X Y and Z to troubleshoot this".

The output of php -r 'phpinfo();' may also be helpful.

Posted: **Wed Mar 01, 2017 8:50 pm**

Code: Select all

/etc/httpd/conf.d/nrdp.conf
<Directory "/usr/local/nrdp">
#  SSLRequireSSL
   Options None
   AllowOverride None
   Order allow,deny
   Allow from all
#  Order deny,allow
#  Deny from all
#  Allow from 127.0.0.1
#   AuthName "NRDP"
#   AuthType Basic
#   AuthUserFile /usr/local/nrdp/htpasswd.users
#  Require valid-user
   Require all granted
   Require all granted
</Directory>

Alias /nrdp "/usr/local/nrdp/server"

Code: Select all

php -r 'phpinfo();'
phpinfo()
PHP Version => 5.4.16

Code: Select all

System => Linux NAGIOSSVR 3.10.0-327.el7.x86_64 #1 SMP Thu Oct 29 17:29:29 EDT 2015 x86_64
Build Date => Jun 10 2015 04:34:11
Server API => Command Line Interface
Virtual Directory Support => disabled
Configuration File (php.ini) Path => /etc
Loaded Configuration File => /etc/php.ini
Scan this dir for additional .ini files => /etc/php.d
Additional .ini files parsed => /etc/php.d/curl.ini,
/etc/php.d/dom.ini,
/etc/php.d/fileinfo.ini,
/etc/php.d/gd.ini,
/etc/php.d/json.ini,
/etc/php.d/ldap.ini,
/etc/php.d/mbstring.ini,
/etc/php.d/mcrypt.ini,
/etc/php.d/mssql.ini,
/etc/php.d/mysql.ini,
/etc/php.d/mysqli.ini,
/etc/php.d/pdo.ini,
/etc/php.d/pdo_dblib.ini,
/etc/php.d/pdo_mysql.ini,
/etc/php.d/pdo_pgsql.ini,
/etc/php.d/pdo_sqlite.ini,
/etc/php.d/pgsql.ini,
/etc/php.d/phar.ini,
/etc/php.d/posix.ini,
/etc/php.d/snmp.ini,
/etc/php.d/sourceguardian.ini,
/etc/php.d/sqlite3.ini,
/etc/php.d/ssh2.ini,
/etc/php.d/sysvmsg.ini,
/etc/php.d/sysvsem.ini,
/etc/php.d/sysvshm.ini,
/etc/php.d/wddx.ini,
/etc/php.d/xmlreader.ini,
/etc/php.d/xmlwriter.ini,
/etc/php.d/xsl.ini,
/etc/php.d/zip.ini

PHP API => 20100412
PHP Extension => 20100525
Zend Extension => 220100525
Zend Extension Build => API220100525,NTS
PHP Extension Build => API20100525,NTS
Debug Build => no
Thread Safety => disabled
Zend Signal Handling => disabled
Zend Memory Manager => enabled
Zend Multibyte Support => provided by mbstring
IPv6 Support => enabled
DTrace Support => disabled

Registered PHP Streams => https, ftps, compress.zlib, compress.bzip2, php, file, glob, data, http, ftp, phar, ssh2.shell, ssh2.exec, ssh2.tunnel, ssh2.scp, ssh2.sftp, zip
Registered Stream Socket Transports => tcp, udp, unix, udg, ssl, sslv3, sslv2, tls
Registered Stream Filters => zlib.*, bzip2.*, convert.iconv.*, string.rot13, string.toupper, string.tolower, string.strip_tags, convert.*, consumed, dechunk, mcrypt.*, mdecrypt.*

This program makes use of the Zend Scripting Language Engine:
Zend Engine v2.4.0, Copyright (c) 1998-2013 Zend Technologies

_______________________________________________________________________

Configuration

Code: Select all

Posted: **Thu Mar 02, 2017 3:26 pm**

I think it'd be best to start with a fresh, minimal installation of RHEL using the latest version of Nagios XI then get things working from there.

Troubleshooting without knowing the specific hardening steps taken makes things difficult. If you can get the passive checks coming in without the hardening in place, then there's probably some steps of the hardening script that need to be evaluated or worked around.

Nagios Support Forum

NRDP Not Showing Unconfigured Objects

Re: NRDP Not Showing Unconfigured Objects

Re: NRDP Not Showing Unconfigured Objects

Re: NRDP Not Showing Unconfigured Objects

Re: NRDP Not Showing Unconfigured Objects

Re: NRDP Not Showing Unconfigured Objects

Re: NRDP Not Showing Unconfigured Objects

Re: NRDP Not Showing Unconfigured Objects

Re: NRDP Not Showing Unconfigured Objects

Re: NRDP Not Showing Unconfigured Objects

Re: NRDP Not Showing Unconfigured Objects