Nagios Support Forum

Can you answer these?

scottwilkerson wrote:Is that all that was in the file when you ran visudo?

Because that is mussing all of the defaults.. Can you check with an administrator to make sure you use standard sudoers?

Also when you had it open and saved it with

Code: Select all

:wq

did you get any errors?

scottwilkerson wrote:Can you answer these?

scottwilkerson wrote:Is that all that was in the file when you ran visudo?

Because that is mussing all of the defaults.. Can you check with an administrator to make sure you use standard sudoers?

Also when you had it open and saved it with

Code: Select all

:wq

did you get any errors?

## Sudoers allows particular users to run various commands as
## the root user, without needing the root password.
##
## Examples are provided at the bottom of the file for collections
## of related commands, which can then be delegated out to particular
## users or groups.
##
## This file must be edited with the 'visudo' command.

## Host Aliases
## Groups of machines. You may prefer to use hostnames (perhaps using
## wildcards for entire domains) or IP addresses instead.
# Host_Alias FILESERVERS = fs1, fs2
# Host_Alias MAILSERVERS = smtp, smtp2

## User Aliases
## These aren't often necessary, as you can use regular groups
## (ie, from files, LDAP, NIS, etc) in this file - just use %groupname
## rather than USERALIAS
# User_Alias ADMINS = jsmith, mikem


## Command Aliases
## These are groups of related commands...

## Networking
# Cmnd_Alias NETWORKING = /sbin/route, /sbin/ifconfig, /bin/ping, /sbin/dhclient, /usr/bin/net, /sbin/iptables, /usr/bin/rfcomm, /usr/bin/wvdial, /sbin/iwconfig, /sbin/mii-tool

## Installation and management of software
# Cmnd_Alias SOFTWARE = /bin/rpm, /usr/bin/up2date, /usr/bin/yum

## Services

## Updating the locate database
# Cmnd_Alias LOCATE = /usr/bin/updatedb

## Storage
# Cmnd_Alias STORAGE = /sbin/fdisk, /sbin/sfdisk, /sbin/parted, /sbin/partprobe, /bin/mount, /bin/umount

## Delegating permissions
# Cmnd_Alias DELEGATING = /usr/sbin/visudo, /bin/chown, /bin/chmod, /bin/chgrp

## Processes
# Cmnd_Alias PROCESSES = /bin/nice, /bin/kill, /usr/bin/kill, /usr/bin/killall

## Drivers
# Cmnd_Alias DRIVERS = /sbin/modprobe

# Defaults specification

#
# Refuse to run if unable to disable echo on the tty.
#
Defaults !visiblepw

#
# Preserving HOME has security implications since many programs
# use it when searching for configuration files. Note that HOME
# is already set when the the env_reset option is enabled, so
# this option is only effective for configurations where either
# env_reset is disabled or HOME is present in the env_keep list.
#
Defaults always_set_home

Defaults env_reset
Defaults env_keep = "COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS"
Defaults env_keep += "MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE"
Defaults env_keep += "LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES"
Defaults env_keep += "LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE"
Defaults env_keep += "LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY"

#
# Adding HOME to env_keep may enable a user to run unrestricted
# commands via sudo.
#
# Defaults env_keep += "HOME"

Defaults secure_path = /sbin:/bin:/usr/sbin:/usr/bin

## Next comes the main part: which users can run what software on
## which machines (the sudoers file can be shared between multiple
## systems).
## Syntax:
##
## user MACHINE=COMMANDS
##
## The COMMANDS section may have other options added to it.
##
## Allow root to run any commands anywhere
root ALL=(ALL) ALL

## Allows members of the 'sys' group to run networking, software,
## service management apps and more.
# %sys ALL = NETWORKING, SOFTWARE, SERVICES, STORAGE, DELEGATING, PROCESSES, LOCATE, DRIVERS

## Allows people in group wheel to run all commands
%wheel ALL=(ALL) ALL

## Same thing without a password
# %wheel ALL=(ALL) NOPASSWD: ALL

## Allows members of the users group to mount and unmount the
## cdrom as root
# %users ALL=/sbin/mount /mnt/cdrom, /sbin/umount /mnt/cdrom

## Allows members of the users group to shutdown this system
# %users localhost=/sbin/shutdown -h now

## Read drop-in files from /etc/sudoers.d (the # here does not mean a comment)
#includedir /etc/sudoers.d


User_Alias NAGIOSXI=nagios
User_Alias NAGIOSXIWEB=apache
NAGIOSXI ALL = NOPASSWD:/etc/init.d/nagios start
NAGIOSXI ALL = NOPASSWD:/etc/init.d/nagios stop
NAGIOSXI ALL = NOPASSWD:/etc/init.d/nagios restart
NAGIOSXI ALL = NOPASSWD:/etc/init.d/nagios reload
NAGIOSXI ALL = NOPASSWD:/etc/init.d/nagios status
NAGIOSXI ALL = NOPASSWD:/etc/init.d/nagios checkconfig
NAGIOSXI ALL = NOPASSWD:/etc/init.d/ndo2db start
NAGIOSXI ALL = NOPASSWD:/etc/init.d/ndo2db stop
NAGIOSXI ALL = NOPASSWD:/etc/init.d/ndo2db restart
NAGIOSXI ALL = NOPASSWD:/etc/init.d/ndo2db reload
NAGIOSXI ALL = NOPASSWD:/etc/init.d/ndo2db status
NAGIOSXI ALL = NOPASSWD:/etc/init.d/npcd start
NAGIOSXI ALL = NOPASSWD:/etc/init.d/npcd stop
NAGIOSXI ALL = NOPASSWD:/etc/init.d/npcd restart
NAGIOSXI ALL = NOPASSWD:/etc/init.d/npcd reload
NAGIOSXI ALL = NOPASSWD:/etc/init.d/npcd status
NAGIOSXI ALL = NOPASSWD:/usr/bin/php /usr/local/nagiosxi/html/includes/components/autodiscovery/scripts/autodiscover_new.php *
NAGIOSXI ALL = NOPASSWD:/usr/local/nagiosxi/html/includes/components/profile/getprofile.sh
NAGIOSXI ALL = NOPASSWD:/usr/local/nagiosxi/scripts/upgrade_to_latest.sh
NAGIOSXI ALL = NOPASSWD:/usr/local/nagiosxi/scripts/change_timezone.sh
NAGIOSXI ALL = NOPASSWD:/usr/local/nagiosxi/scripts/manage_services.sh *
NAGIOSXI ALL = NOPASSWD:/usr/local/nagiosxi/scripts/reset_config_perms.sh
NAGIOSXI ALL = NOPASSWD:/usr/local/nagiosxi/scripts/backup_xi.sh *
NAGIOSXIWEB ALL = NOPASSWD:/usr/bin/tail -100 /var/log/messages
NAGIOSXIWEB ALL = NOPASSWD:/usr/bin/tail -100 /var/log/httpd/error_log
NAGIOSXIWEB ALL = NOPASSWD:/usr/bin/tail -100 /var/log/mysqld.log
NAGIOSXIWEB ALL = NOPASSWD:/usr/bin/php /usr/local/nagiosxi/html/includes/components/autodiscovery/scripts/autodiscover_new.php *
NAGIOSXIWEB ALL = NOPASSWD:/usr/local/nagiosxi/html/includes/components/profile/getprofile.sh
NAGIOSXIWEB ALL = NOPASSWD:/etc/init.d/snmptt restart
NAGIOSXIWEB ALL = NOPASSWD:/usr/local/nagiosxi/scripts/repair_databases.sh
NAGIOSXIWEB ALL = NOPASSWD:/usr/local/nagiosxi/scripts/manage_services.sh *

Please run and show the output

Also run the following and then apply configuration through thwe UI Please send the output to the CLI screen

scottwilkerson wrote:Please run

Code: Select all

visudo -c

and show the output

Also run the following and then apply configuration through thwe UI

Code: Select all

tail -f /usr/local/nagiosxi/var/cmdsubsys.log

Please send the output to the CLI screen

[root@server~]# visudo -c
/etc/sudoers: parsed OK


[root@server~]# tail -f /usr/local/nagiosxi/var/cmdsubsys.log
PROCESSED 0 COMMANDS
.............................................................
PROCESSED 0 COMMANDS
............................................................
PROCESSED 0 COMMANDS
...........................................................
PROCESSED 0 COMMANDS
.............................................................
PROCESSED 0 COMMANDS
.......................PROCESSING COMMAND ID 76...
PROCESS COMMAND: CMD=17, DATA=
APPLYING NAGIOSCORE CONFIG...
CMDLINE=cd /usr/local/nagiosxi/scripts && ./reconfigure_nagios.sh
URL: http://localhost/nagiosxi/includes/components/ccm/
CMDLINE
--2018-04-19 11:05:26-- http://localhost/nagiosxi/includes/components/ccm/
Resolving localhost (localhost)... 127.0.0.1
Connecting to localhost (localhost)|127.0.0.1|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/html]
Saving to: ‘nagiosql.login’

0K .......... .......... .......... ...... 3.18M=0.01s

2018-04-19 11:05:26 (3.18 MB/s) - ‘nagiosql.login’ saved [37359]

/usr/bin/wget --save-cookies nagiosql.cookies --keep-session-cookies http://localhost/nagiosxi/includes/components/ccm/ --no-check-certificate --post-data 'submit=Login&hidelog=true&loginSubmitted=true&backend=1&username=nagiosxi&password=S6lY6NVWpF9T' -O nagiosql.loginLOGIN SUCCESSFUL!
IMPORTING CONFIG FILES...URL: http://localhost/nagiosxi/includes/components/ccm/
Array
(
)
/usr/local/nagiosxi/scripts/export_nagiosql.sh: line 7: 10568 Killed sudo $BASEDIR/reset_config_perms.sh
RESETTING CONFIG PERMS FAILED!\n
OUTPUT=RESETTING CONFIG PERMS FAILED!\n
RETURNCODE=4
.....................................
PROCESSED 1 COMMANDS

Please return the results of all the questions asked, it will save a lot of time and help us assist you more quickly.

What is the result of this?

scottwilkerson wrote:Please run

Code: Select all

visudo -c

I has you try something similar before but it is clear that something is killing this sudo command, lets run the following and return the results:

nagios@nsc-dev-maost-nagios-01 scripts]$ ./reset_config_perms.sh
RESETTING PERMS
/bin/chown: changing ownership of '/usr/local/nagios/etc/hosts/localhost.cfg': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/hosts/nsc-dev-maost-nagios-01.ba.ssa.gov.cfg': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/hosts': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/import': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/services/localhost.cfg': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/services/nsc-dev-maost-nagios-01.ba.ssa.gov.cfg': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/services': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/static/xiobjects.cfg': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/static/xitemplates.cfg': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/static/xitest.cfg': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/static': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/pnp/check_commands/check_nwstat.cfg-sample': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/pnp/check_commands': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/pnp/pages/web_traffic.cfg-sample': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/pnp/pages': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/pnp/background.pdf': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/pnp/config.php': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/pnp/npcd.cfg': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/pnp/npcd.cfg-sample': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/pnp/pnp4nagios_release': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/pnp/process_perfdata.cfg': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/pnp/process_perfdata.cfg-sample': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/pnp/rra.cfg': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/pnp/rra.cfg-sample': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/pnp': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/cgi.cfg': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/nagios.cfg': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/resource.cfg': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/nrpe.cfg': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/nsca.cfg': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/send_nsca.cfg': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/ndo2db.cfg': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/ndomod.cfg': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/hostgroups.cfg': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/servicegroups.cfg': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/hosttemplates.cfg': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/servicetemplates.cfg': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/timeperiods.cfg': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/commands.cfg': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/contacts.cfg': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/contactgroups.cfg': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/contacttemplates.cfg': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/servicedependencies.cfg': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/hostdependencies.cfg': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/serviceescalations.cfg': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/hostescalations.cfg': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/serviceextinfo.cfg': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/hostextinfo.cfg': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/recurringdowntime.cfg': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagios/etc/': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/hosts': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/hosts/localhost.cfg': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/hosts/nsc-dev-maost-nagios-01.ba.ssa.gov.cfg': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/import': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/services': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/services/localhost.cfg': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/services/nsc-dev-maost-nagios-01.ba.ssa.gov.cfg': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/static': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/static/xiobjects.cfg': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/static/xitemplates.cfg': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/static/xitest.cfg': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/pnp': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/pnp/check_commands': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/pnp/check_commands/check_nwstat.cfg-sample': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/pnp/pages': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/pnp/pages/web_traffic.cfg-sample': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/pnp/background.pdf': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/pnp/config.php': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/pnp/npcd.cfg': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/pnp/npcd.cfg-sample': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/pnp/pnp4nagios_release': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/pnp/process_perfdata.cfg': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/pnp/process_perfdata.cfg-sample': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/pnp/rra.cfg': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/pnp/rra.cfg-sample': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/cgi.cfg': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/nagios.cfg': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/resource.cfg': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/nrpe.cfg': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/nsca.cfg': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/send_nsca.cfg': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/ndo2db.cfg': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/ndomod.cfg': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/hostgroups.cfg': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/servicegroups.cfg': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/hosttemplates.cfg': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/servicetemplates.cfg': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/timeperiods.cfg': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/commands.cfg': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/contacts.cfg': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/contactgroups.cfg': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/contacttemplates.cfg': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/servicedependencies.cfg': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/hostdependencies.cfg': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/serviceescalations.cfg': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/hostescalations.cfg': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/serviceextinfo.cfg': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/hostextinfo.cfg': Operation not permitted
/bin/chmod: changing permissions of '/usr/local/nagios/etc/recurringdowntime.cfg': Operation not permitted
/bin/chown: changing ownership of '/usr/local/nagiosxi/etc/components/ccm_config.inc.php': Operation not permitted

you forgot to put sudo first.

again *** ALSO ***
Please return the results of all the questions asked, it will save a lot of time and help us assist you more quickly.

What is the result of this?

Please run

Code: Select all

visudo -c

Thanks, now it works

# su - nagios
$ cd /usr/local/nagiosxi/scripts/
$ sudo ./reset_config_perms.sh
RESETTING PERMS
$ echo $?
0

I ran below command as Nagios user
$ visudo -c
visudo: unable to open /etc/sudoers: Permission denied

this command you have to run as root

scottwilkerson wrote:this command you have to run as root

Code: Select all

visudo -c

[root@serever ~]# visudo -c
/etc/sudoers: parsed OK