Page 2 of 3

Re: NSP: Sorry Dave, I can't let you do that

Posted: Mon Oct 09, 2017 12:13 pm
by n8860104460
We're still just using HTTP. I also deleted the old session files and it did not resolve the issue.

Re: NSP: Sorry Dave, I can't let you do that

Posted: Mon Oct 09, 2017 4:46 pm
by tgriep
Is there a chance you can post or PM me your system profile?

To get your system profile. Login to the Nagios XI GUI using a web browser.
Click the "Admin" > "System Profile" Menu
Click the "Download Profile" button
Save the profile.zip file and either post it or PM it to me.
Thanks.

Re: NSP: Sorry Dave, I can't let you do that

Posted: Tue Oct 10, 2017 2:57 am
by n8860104460
is there any other way to get the details apart form browser as this is the issue we are working with while login into the Nagios XI web browser we are getting error "NSP: Sorry Dave, I can't let you do that"

Re: NSP: Sorry Dave, I can't let you do that

Posted: Tue Oct 10, 2017 8:40 am
by tgriep
Can you run the following as root on the Nagios server and post the results?

Code: Select all

grep "date.timezone" /etc/php.ini
ls -l /etc/localtime
php -r 'echo date("D M j G:i:s T Y")."\n";'
date
php -r "echo date('r').PHP_EOL;"
strings /etc/localtime | tail -1
ls -l /var/lib/php/session
Then run the following command

Code: Select all

tail -f /var/log/httpd/*_log
Try and login to the XI GUI and post the output of the tail command.

Re: NSP: Sorry Dave, I can't let you do that

Posted: Tue Oct 10, 2017 11:48 am
by n8860104460
[root@usa0300lv1126 ~]# grep "date.timezone" /etc/php.ini
; http://www.php.net/manual/en/datetime.c ... e.timezone
date.timezone = America/New_York
[root@usa0300lv1126 ~]# ls -l /etc/localtime
lrwxrwxrwx 1 root root 30 May 19 2016 /etc/localtime -> /usr/share/zoneinfo/US/Eastern
[root@usa0300lv1126 ~]# php -r 'echo date("D M j G:i:s T Y")."\n";'
Tue Oct 10 11:49:14 EDT 2017
[root@usa0300lv1126 ~]# date
Tue Oct 10 11:49:14 EDT 2017
[root@usa0300lv1126 ~]# php -r "echo date('r').PHP_EOL;"
Tue, 10 Oct 2017 11:49:14 -0400
[root@usa0300lv1126 ~]# strings /etc/localtime | tail -1
EST5EDT,M3.2.0,M11.1.0
[root@usa0300lv1126 ~]# ls -l /var/lib/php/session
total 4
-rw------- 1 apache apache 16 Oct 10 11:49 sess_o6795lgqvj0g9datc9k13herf1

LOGS:


[root@usa0300lv1126 ~]# tail -f /var/log/httpd/*_log
==> /var/log/httpd/access_log <==
13.149.233.118 - - [10/Oct/2017:11:47:20 -0400] "GET /favicon.ico HTTP/1.1" 404 289 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:56.0) Gecko/20100101 Firefox/56.0"
13.149.233.118 - - [10/Oct/2017:11:47:20 -0400] "GET /favicon.ico HTTP/1.1" 404 289 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:56.0) Gecko/20100101 Firefox/56.0"
127.0.0.1 - - [10/Oct/2017:11:47:24 -0400] "POST /nagiosxi/backend/ HTTP/1.1" 200 818 "-" "BinGet/1.00.A (http://www.bin-co.com/php/scripts/load/)"
127.0.0.1 - - [10/Oct/2017:11:47:45 -0400] "POST /nagiosxi/backend/ HTTP/1.1" 200 818 "-" "BinGet/1.00.A (http://www.bin-co.com/php/scripts/load/)"
127.0.0.1 - - [10/Oct/2017:11:48:03 -0400] "POST /nagiosxi/backend/ HTTP/1.1" 200 818 "-" "BinGet/1.00.A (http://www.bin-co.com/php/scripts/load/)"
127.0.0.1 - - [10/Oct/2017:11:48:23 -0400] "POST /nagiosxi/backend/ HTTP/1.1" 200 818 "-" "BinGet/1.00.A (http://www.bin-co.com/php/scripts/load/)"
127.0.0.1 - - [10/Oct/2017:11:48:44 -0400] "POST /nagiosxi/backend/ HTTP/1.1" 200 818 "-" "BinGet/1.00.A (http://www.bin-co.com/php/scripts/load/)"
127.0.0.1 - - [10/Oct/2017:11:49:03 -0400] "POST /nagiosxi/backend/ HTTP/1.1" 200 818 "-" "BinGet/1.00.A (http://www.bin-co.com/php/scripts/load/)"
127.0.0.1 - - [10/Oct/2017:11:49:24 -0400] "POST /nagiosxi/backend/ HTTP/1.1" 200 818 "-" "BinGet/1.00.A (http://www.bin-co.com/php/scripts/load/)"
127.0.0.1 - - [10/Oct/2017:11:49:45 -0400] "POST /nagiosxi/backend/ HTTP/1.1" 200 818 "-" "BinGet/1.00.A (http://www.bin-co.com/php/scripts/load/)"

==> /var/log/httpd/error_log <==
[Tue Oct 10 00:12:02 2017] [error] [client 13.245.48.160] File does not exist: /var/www/html/HNAP1
[Tue Oct 10 00:12:02 2017] [error] [client 13.245.48.160] File does not exist: /var/www/html/HNAP1
[Tue Oct 10 00:12:02 2017] [error] [client 13.245.48.160] File does not exist: /var/www/html/login
[Tue Oct 10 00:12:02 2017] [error] [client 13.245.48.160] File does not exist: /var/www/html/login
[Tue Oct 10 00:12:02 2017] [error] [client 13.245.48.160] File does not exist: /var/www/html/login
[Tue Oct 10 00:12:02 2017] [error] [client 13.245.48.160] File does not exist: /var/www/html/login
[Tue Oct 10 00:12:02 2017] [error] [client 13.245.48.160] File does not exist: /var/www/html/login
[Tue Oct 10 01:17:54 2017] [error] [client 13.129.99.80] File does not exist: /var/www/html/server-status
[Tue Oct 10 11:47:20 2017] [error] [client 13.149.233.118] File does not exist: /var/www/html/favicon.ico
[Tue Oct 10 11:47:20 2017] [error] [client 13.149.233.118] File does not exist: /var/www/html/favicon.ico

==> /var/log/httpd/ssl_access_log <==

==> /var/log/httpd/ssl_error_log <==
[Sun Oct 08 03:32:08 2017] [warn] RSA server certificate CommonName (CN) `nagios.corp.xerox.com' does NOT match server name!?

==> /var/log/httpd/ssl_request_log <==

Re: NSP: Sorry Dave, I can't let you do that

Posted: Tue Oct 10, 2017 12:43 pm
by tgriep
In your first post, you said you in the process to migrate to these systems, have you restored any data to this server?
Can you access the server by using the IP address like the following example and does the Nagios XI welcome screen come up?

Code: Select all

http://xxx.xxx.xxx.xxx

Re: NSP: Sorry Dave, I can't let you do that

Posted: Tue Oct 10, 2017 2:09 pm
by n8860104460
Yes, we restored the data to the server and can access only the front page http://<IP>. It does not allow us to login beyond that example as just the login page pops up.

Re: NSP: Sorry Dave, I can't let you do that

Posted: Tue Oct 10, 2017 2:54 pm
by npolovenko
@n8860104460 Could you upload the following config files?

Code: Select all

config.inc.php from /usr/local/nagiosxi/html
httpd.conf from /etc/httpd/conf
nagiosxi.conf from /etc/httpd/conf.d
Also when you click on a login button, does the servers dnsname or IP adress change in the webrowser?Can you attach a couple screenshots #1 login window including the browser's address bar and #2 unsuccessful login window with Sorry Dave message on it, including the address bar?

Re: NSP: Sorry Dave, I can't let you do that

Posted: Wed Oct 11, 2017 12:27 am
by n8860104460
I've attached all the files that were requested in a zip file.

The ip address stays the same in the web browser. I made sure of that a while back. I've attached two screen shots in this as well.

Re: NSP: Sorry Dave, I can't let you do that

Posted: Wed Oct 11, 2017 12:41 am
by tacolover101
We are migrating these systems from an older system to a new one and we're stuck with that error message and cannot log in at all.
let's backtrack a bit. what process did you follow for this?