Hi,
right, i'll come to that. You're right, there is one from objectjson.cgi as well:
As you can see, this asks for a complete hosts enumeration, which covers several hundred entities and is somewhat sensitive, as it includes our clients' hosts, too. To me, it looks completely normal, though. An anonymized sample:
Code: Select all
{
"format_version": 0,
"result": {
"query_time": 1461136706000,
"cgi": "objectjson.cgi",
"user": "nagiosadmin",
"query": "hostlist",
"query_status": "released",
"program_start": 1461074245000,
"last_data_update": 1461074246000,
"type_code": 0,
"type_text": "Success",
"message": ""
},
"data": {
"selectors": {
},
"hostlist": {
"Host1": {
"name": "Host1",
"display_name": "Host1",
"alias": "host1",
"address": "host1",
"parent_hosts": [
"dyndns.org"
],
"child_hosts": [
],
"services": [
],
"check_command": "check-host-alive",
"initial_state": "up",
"check_interval": 5,00,
"retry_interval": 1,00,
"max_attempts": 10,
"event_handler": "",
"contact_groups": [
"admins"
],
"contacts": [
"nagiosadmin",
"nagiossupport"
],
"notification_interval": 120,00,
"first_notification_delay": 0,00,
"notifications_options": [
"up",
"down",
"ok",
"warning",
"recovery"
],
"notification_period": "24x7",
"check_period": "24x7",
"flap_detection_enabled": true,
"low_flap_threshold": 0,00,
"high_flap_threshold": 0,00,
"flap_detection_options": [
"up",
"down",
"unreachable",
"ok",
"unkwown",
"warning",
"critical",
"recovery",
"pending",
"flapping",
"downtime"
],
"stalking_options": [
],
"check_freshness": false,
"freshness_threshold": 0,
"process_performance_data": true,
"checks_enabled": true,
"accept_passive_checks": true,
"event_handler_enabled": true,
"retain_status_information": true,
"retain_nonstatus_information": true,
"obsess": true,
"hourly_value": false,
"notes": "",
"notes_url": "",
"action_url": "",
"icon_image": "",
"icon_image_alt": "",
"vrml_image": "",
"statusmap_image": "",
"have_2d_coords": false,
"x_2d": -1,
"y_2d": -1,
"have_3d_coords": false,
"x_3d": 0,00,
"y_3d": 0,00,
"z_3d": 0,00,
"should_be_drawn": true,
"custom_variables": {
}
},
...
}
}
}
I believe nothing much in the way of error causes can be gleaned from that.
But i noted something about angular.min.js, probably also relevant, from the Console Error tab (End line references moved above code lines for clarity):
Code: Select all
"NetworkError: 401 Unauthorized - https://cloud.united-networking.eu/nagios/map-links.html"
map-links.html
"NetworkError: 401 Unauthorized - https://cloud.united-networking.eu/nagios/map-popup.html"
map-popup.html
angular.min.js (Zeile 103)
Error: JSON.parse: expected double-quoted property name at line 33 column 29 of the JSON data
oc@https://cloud.united-networking.eu/nagios/angularjs/angular-1.3.9/angular.min.js:14:151
Yb@https://cloud.united-networking.eu/nagios/angularjs/angular-1.3.9/angular.min.js:77:125
Yc/<@https://cloud.united-networking.eu/nagios/angularjs/angular-1.3.9/angular.min.js:77:487
s@https://cloud.united-networking.eu/nagios/angularjs/angular-1.3.9/angular.min.js:7:300
Yc@https://cloud.united-networking.eu/nagios/angularjs/angular-1.3.9/angular.min.js:77:469
c@https://cloud.united-networking.eu/nagios/angularjs/angular-1.3.9/angular.min.js:79:109
f/<@https://cloud.united-networking.eu/nagios/angularjs/angular-1.3.9/angular.min.js:112:343
Pe/this.$get</l.prototype.$eval@https://cloud.united-networking.eu/nagios/angularjs/angular-1.3.9/angular.min.js:126:189
Pe/this.$get</l.prototype.$digest@https://cloud.united-networking.eu/nagios/angularjs/angular-1.3.9/angular.min.js:123:278
Pe/this.$get</l.prototype.$apply@https://cloud.united-networking.eu/nagios/angularjs/angular-1.3.9/angular.min.js:126:469
l@https://cloud.united-networking.eu/nagios/angularjs/angular-1.3.9/angular.min.js:81:420
O@https://cloud.united-networking.eu/nagios/angularjs/angular-1.3.9/angular.min.js:86:51
wf/</w.onload@https://cloud.united-networking.eu/nagios/angularjs/angular-1.3.9/angular.min.js:87:78
angular.min.js (Zeile 103)
e/<()
angular.min.js (Zeile 76)
He/this.$get</<()
a = Object { type="object"}
c = undefined
angular.min.js (Zeile 112)
f/<()
angular.min.js (Zeile 126)
Pe/this.$get</l.prototype.$eval()
a = Object { type="object"}
b = undefined
angular.min.js (Zeile 123)
Pe/this.$get</l.prototype.$digest()
angular.min.js (Zeile 126)
Pe/this.$get</l.prototype.$apply()
a = undefined
angular.min.js (Zeile 81)
l()
b = 200
c = Object { type="longString"}
d = "Date: Wed, 20 Apr 2016 0...n/json; charset=utf-8\r\n"
e = "OK"
angular.min.js (Zeile 86)
O()
a = Object { type="object"}
d = 200
e = Object { type="longString"}
f = "Date: Wed, 20 Apr 2016 0...n/json; charset=utf-8\r\n"
g = "OK"
angular.min.js (Zeile 87)
wf/</w.onload()
And yes, i felt moved to check on owner and permissions:
They were nagios:nagios and 664, respectively, for all of the files under /nagios and /nagios/js.