Nagios Support Forum

I am able to execute the command /usr/local/nagiosxi/scripts/reconfigure_nagios.sh as user nagios happily.

--- reset_config_perms.sh ------------
> Setting CCM script permissions
> Setting script permissions
> Setting special component script permissions
> Setting configuration file/directory permissions
> Setting perfdata directory and RRD permissions
> Setting NOM checkpoint user:group permissions
> + Setting CCM configuration file user:group permissions
> + Setting Recurring Downtime file user:group permissions
> + Setting BPI configuration file user:group permissions
--------------------------------------

--- ccm_import.php -------------------
> Setting import directory: /usr/local/nagios/etc/import/
> Importing config files into the CCM
No files to import
--------------------------------------

--- ccm_export.php -------------------
> Writing CCM configuration to Nagios files
Finished writing out configuraton
--------------------------------------

--------------------------------------
> Verifying configuration with Nagios Core
> Output:
Nagios Core 4.4.2
Copyright (c) 2009-present Nagios Core Development Team and Community Contributors
Copyright (c) 1999-2009 Ethan Galstad
Last Modified: 2018-08-16
License: GPL

Website: https://www.nagios.org
Reading configuration data...
Read main config file okay...
Read object config files okay...

Running pre-flight check on configuration data...

Checking objects...
Checked 12 services.
Checked 1 hosts.
Checked 12 host groups.
Checked 0 service groups.
Checked 2 contacts.
Checked 2 contact groups.
Checked 128 commands.
Checked 8 time periods.
Checked 0 host escalations.
Checked 0 service escalations.
Checking for circular paths...
Checked 1 hosts
Checked 0 service dependencies
Checked 0 host dependencies
Checked 8 timeperiods
Checking global event handlers...
Checking obsessive compulsive processor commands...
Checking misc settings...

Total Warnings: 0
Total Errors: 0

Things look okay - No serious problems were detected during the pre-flight check
> Return Code: 0
--------------------------------------

Please find the below output.

zip -r /tmp/polkit_files.zip /etc/polkit-1 /usr/share/polkit-1
adding: etc/polkit-1/ (stored 0%)
adding: etc/polkit-1/localauthority/ (stored 0%)
adding: etc/polkit-1/localauthority/30-site.d/ (stored 0%)
adding: etc/polkit-1/localauthority/50-local.d/ (stored 0%)
adding: etc/polkit-1/localauthority/90-mandatory.d/ (stored 0%)
adding: etc/polkit-1/localauthority/10-vendor.d/ (stored 0%)
adding: etc/polkit-1/localauthority/20-org.d/ (stored 0%)
adding: etc/polkit-1/rules.d/ (stored 0%)
adding: etc/polkit-1/rules.d/49-polkit-pkla-compat.rules (deflated 60%)
adding: etc/polkit-1/rules.d/50-default.rules (deflated 28%)
adding: etc/polkit-1/localauthority.conf.d/ (stored 0%)
adding: usr/share/polkit-1/ (stored 0%)
adding: usr/share/polkit-1/rules.d/ (stored 0%)
adding: usr/share/polkit-1/actions/ (stored 0%)
adding: usr/share/polkit-1/actions/com.redhat.SubscriptionManager.policy (deflated 52%)
adding: usr/share/polkit-1/actions/org.fedoraproject.FirewallD1.policy (deflated 86%)
adding: usr/share/polkit-1/actions/org.freedesktop.locale1.policy (deflated 77%)
adding: usr/share/polkit-1/actions/org.freedesktop.machine1.policy (deflated 65%)
adding: usr/share/polkit-1/actions/org.fedoraproject.FirewallD1.desktop.policy.choice (deflated 85%)
adding: usr/share/polkit-1/actions/net.reactivated.fprint.device.policy (deflated 78%)
adding: usr/share/polkit-1/actions/abrt_polkit.policy (deflated 62%)
adding: usr/share/polkit-1/actions/org.freedesktop.import1.policy (deflated 61%)
adding: usr/share/polkit-1/actions/org.freedesktop.systemd1.policy (deflated 80%)
adding: usr/share/polkit-1/actions/org.fedoraproject.FirewallD1.server.policy.choice (deflated 86%)
adding: usr/share/polkit-1/actions/com.redhat.tuned.policy (deflated 87%)
adding: usr/share/polkit-1/actions/org.freedesktop.NetworkManager.policy (deflated 85%)
adding: usr/share/polkit-1/actions/com.redhat.RHSM1.Facts.policy (deflated 62%)
adding: usr/share/polkit-1/actions/com.redhat.RHSM1.policy (deflated 49%)
adding: usr/share/polkit-1/actions/org.freedesktop.policykit.policy (deflated 52%)
adding: usr/share/polkit-1/actions/org.freedesktop.login1.policy (deflated 91%)
adding: usr/share/polkit-1/actions/org.freedesktop.hostname1.policy (deflated 79%)
adding: usr/share/polkit-1/actions/org.freedesktop.timedate1.policy (deflated 80%)

Please PM this file that was generated:

Hi ,

Please check the attachment.

So is the only outstanding issue the check_icmp error?

You can run the reconfigure_nagios.sh script as the nagios user but does it work when applying configuration through the web interface?

What is the output of this command?

Yes the only issue is with icmp error.
I can run reconfigure_nagios.sh script as the nagios user and also applying configuration works good through the web interface.

My hosts are showing down due to the below icmp warning.
Down
Warning: This plugin must be either run as root or setuid root.
To run as root, you can use a tool like sudo.
To set the setuid permissions, use the command:
chmod u+s yourpluginfile
check_icmp: Failed to obtain ICMP socket: Operation not permitted

Below are the permissions:
ll check_icmp
-rwsrwxr-x 1 root root 227464 Nov 8 10:12 check_icmp


Output:-
ls -l `which ping`
-rwxr-xr-x. 1 root root 66168 May 22 2017 /usr/bin/ping

Please run these commands as root and see if it resolves it:

Do i need to restart Nagios after running these commands.

Restarted the nagios after changes but still the same.

check_icmp
-rwsrwxr-x 1 root nagios 227464 Nov 8 10:12 check_icmp

This turned out to be nosetuid being defined in your /etc/fstab entry which wouldn't allow the suid to work properly, remounting it without nosetuid allowed it to work.

I'm just posting this for future readers.

Thanks SSAX
Really appreciated for your help. You can close the ticket.