Page 3 of 4

Re: Availability Summary Data

Posted: Tue Feb 10, 2015 7:03 am
by tcpbr
tmcdonald wrote:Was this new server a clean minimal install of CentOS/RHEL or had it been used previously?

Also, how exactly did you do the migration?

It is a new server with a fresh installation of Centos. First I installed Nagios on the new server, worked fine. Then I did a backup on the old server and restore the new server. Only this.

Re: Availability Summary Data

Posted: Tue Feb 10, 2015 10:22 am
by lmiltchev
Have you tried implementing mod security on this server? Is SELinux enabled? Run the following commands and show us the output in code wraps:

Code: Select all

getenforce
tail -50 /var/log/httpd/error_log

Re: Availability Summary Data

Posted: Tue Feb 10, 2015 2:17 pm
by tcpbr
lmiltchev wrote:Have you tried implementing mod security on this server? Is SELinux enabled? Run the following commands and show us the output in code wraps:

Code: Select all

getenforce
tail -50 /var/log/httpd/error_log

Code: Select all

[root@localhost ~]# getenforce
Disabled
[root@localhost ~]#

Code: Select all

[root@localhost ~]# tail -50 /var/log/httpd/error_log
[Tue Feb 10 16:59:21.787072 2015] [authz_core:error] [pid 15741] [client ::1:343                                                                                        54] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 16:59:42.044783 2015] [authz_core:error] [pid 15923] [client ::1:343                                                                                        56] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:00:02.097111 2015] [authz_core:error] [pid 15739] [client ::1:343                                                                                        68] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:00:22.380151 2015] [authz_core:error] [pid 15875] [client ::1:343                                                                                        70] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:00:42.624810 2015] [authz_core:error] [pid 15743] [client ::1:343                                                                                        72] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:01:01.677453 2015] [authz_core:error] [pid 15740] [client ::1:343                                                                                        82] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:01:21.926940 2015] [authz_core:error] [pid 16230] [client ::1:343                                                                                        84] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:01:42.184673 2015] [authz_core:error] [pid 15742] [client ::1:343                                                                                        86] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:02:01.806050 2015] [authz_core:error] [pid 15924] [client ::1:343                                                                                        95] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:02:22.087213 2015] [authz_core:error] [pid 15741] [client ::1:343                                                                                        98] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:02:42.352584 2015] [authz_core:error] [pid 15923] [client ::1:344                                                                                        00] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:03:01.817092 2015] [authz_core:error] [pid 15739] [client ::1:344                                                                                        10] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:03:22.083498 2015] [authz_core:error] [pid 15875] [client ::1:344                                                                                        12] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:03:42.355312 2015] [authz_core:error] [pid 15743] [client ::1:344                                                                                        14] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:04:01.902567 2015] [authz_core:error] [pid 15740] [client ::1:344                                                                                        24] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:04:22.159813 2015] [authz_core:error] [pid 16230] [client ::1:344                                                                                        26] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:04:42.398546 2015] [authz_core:error] [pid 15742] [client ::1:344                                                                                        28] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:05:02.004139 2015] [authz_core:error] [pid 15924] [client ::1:344                                                                                        40] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:05:22.299177 2015] [authz_core:error] [pid 15741] [client ::1:344                                                                                        42] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:05:42.547515 2015] [authz_core:error] [pid 15923] [client ::1:344                                                                                        44] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:06:01.627722 2015] [authz_core:error] [pid 15739] [client ::1:344                                                                                        53] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:06:21.903090 2015] [authz_core:error] [pid 15875] [client ::1:344                                                                                        56] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:06:42.148465 2015] [authz_core:error] [pid 15743] [client ::1:344                                                                                        58] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:07:02.093017 2015] [authz_core:error] [pid 15740] [client ::1:344                                                                                        68] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:07:22.341758 2015] [authz_core:error] [pid 16230] [client ::1:344                                                                                        70] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:07:42.604866 2015] [authz_core:error] [pid 15742] [client ::1:344                                                                                        72] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:08:01.600603 2015] [authz_core:error] [pid 15924] [client ::1:344                                                                                        81] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:08:21.887562 2015] [authz_core:error] [pid 15741] [client ::1:344                                                                                        84] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:08:42.140413 2015] [authz_core:error] [pid 15923] [client ::1:344                                                                                        86] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:09:01.983660 2015] [authz_core:error] [pid 15739] [client ::1:344                                                                                        96] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:09:22.245297 2015] [authz_core:error] [pid 15875] [client ::1:344                                                                                        98] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:09:42.487644 2015] [authz_core:error] [pid 15743] [client ::1:345                                                                                        00] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:10:01.868841 2015] [authz_core:error] [pid 15740] [client ::1:345                                                                                        12] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:10:22.140598 2015] [authz_core:error] [pid 16230] [client ::1:345                                                                                        14] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:10:42.389125 2015] [authz_core:error] [pid 15742] [client ::1:345                                                                                        16] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:11:02.356859 2015] [authz_core:error] [pid 15924] [client ::1:345                                                                                        26] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:11:22.628174 2015] [authz_core:error] [pid 15741] [client ::1:345                                                                                        28] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:11:42.866857 2015] [authz_core:error] [pid 15923] [client ::1:345                                                                                        30] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:12:02.035601 2015] [authz_core:error] [pid 15739] [client ::1:345                                                                                        40] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:12:22.298797 2015] [authz_core:error] [pid 15875] [client ::1:345                                                                                        42] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:12:42.539060 2015] [authz_core:error] [pid 15743] [client ::1:345                                                                                        44] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:13:02.354149 2015] [authz_core:error] [pid 15740] [client ::1:345                                                                                        53] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:13:22.616299 2015] [authz_core:error] [pid 16230] [client ::1:345                                                                                        56] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:13:42.857247 2015] [authz_core:error] [pid 15742] [client ::1:345                                                                                        58] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:14:02.137528 2015] [authz_core:error] [pid 15924] [client ::1:345                                                                                        68] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:14:22.382373 2015] [authz_core:error] [pid 15741] [client ::1:345                                                                                        70] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:14:42.621019 2015] [authz_core:error] [pid 15923] [client ::1:345                                                                                        72] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:15:01.583086 2015] [authz_core:error] [pid 15739] [client ::1:345                                                                                        82] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:15:21.921330 2015] [authz_core:error] [pid 15875] [client ::1:345                                                                                        86] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend/
[Tue Feb 10 17:15:42.169726 2015] [authz_core:error] [pid 15743] [client ::1:345                                                                                        88] AH01630: client denied by server configuration: /usr/local/nagiosxi/html/bac                                                                                        kend

Re: Availability Summary Data

Posted: Tue Feb 10, 2015 3:16 pm
by lmiltchev
Have you tried implementing mod security on this server? Have you upgraded apache? What is the output of the following command?

Code: Select all

httpd -v
If you upgraded apache, it is possible that you are running into an issue with the newly introduced "mod_authz_core" module. Please, read more about this here:

https://mikegriffin.ie/blog/20140130-au ... iguration/

Re: Availability Summary Data

Posted: Wed Feb 11, 2015 9:45 am
by tcpbr
lmiltchev wrote:Have you tried implementing mod security on this server? Have you upgraded apache? What is the output of the following command?

Code: Select all

httpd -v
If you upgraded apache, it is possible that you are running into an issue with the newly introduced "mod_authz_core" module. Please, read more about this here:

https://mikegriffin.ie/blog/20140130-au ... iguration/
Installation of nagios was made on a fresh copy of Centos 7 with minimal software requisites. After installation Nagios works fine. After restore that problem did begin happen.

Code: Select all

[root@localhost ~]# httpd -v
Server version: Apache/2.4.6 (CentOS)
Server built:   Jan 12 2015 13:22:31
[root@localhost ~]#

Re: Availability Summary Data

Posted: Wed Feb 11, 2015 10:16 am
by abrist
Are you restoring the entire backup including the nagiosxi directory? If so, you will want to run the Nagios XI upgrade script from /tmp to copy over the proper XI files after restore.

How did you restore the new server?

Re: Availability Summary Data

Posted: Thu Feb 12, 2015 9:04 am
by tcpbr
abrist wrote:Are you restoring the entire backup including the nagiosxi directory? If so, you will want to run the Nagios XI upgrade script from /tmp to copy over the proper XI files after restore.

How did you restore the new server?

The Restore was made following this steps

http://assets.nagios.com/downloads/nagi ... ios-XI.pdf

on the new server this error occurs when we execute the upgrade script

Code: Select all

Connecting to localhost (localhost)|::1|:80... connected.
HTTP request sent, awaiting response... 403 Forbidden
2015-02-12 11:58:39 ERROR 403: Forbidden.

Re: Availability Summary Data

Posted: Thu Feb 12, 2015 11:48 am
by abrist
Was ssl forced on the install the backup was originally created from?

Re: Availability Summary Data

Posted: Thu Feb 12, 2015 1:20 pm
by tcpbr
I tried start from the beginning again.

1 - Stop Nagios service on the old server
2 - Backup Nagios on the old server (/usr/local/nagiosxi/scripts/backup_xi.sh)
3 - Install nagios on the New Server
4 - Restore Backup on the new Server (/usr/local/nagiosxi/scripts/restore_xi.sh <backupfile.tar.gz>)

this time i received error on the restore. See attachment

Re: Availability Summary Data

Posted: Thu Feb 12, 2015 5:43 pm
by tgriep
When you installed Nagios XI on the new server, was it running before you tried the restore of the backup?
What was the version of XI you installed on the new server?