Page 1 of 3

Fusion no-auth issue across several XI servers

Posted: Tue May 06, 2014 2:53 pm
by TBT
Our users have individual accounts (UID1, UID2, UID3, etc) to log into Nagios Fusion. The Managed Fused Servers authenticate via Session using a general user roll account (fusionX), account credentials for this roll are the same across all Nagios XI servers.

Logged into Fusion as any user and navigating to the Tactical Overview, we see all XI servers with their respective network elements. The problem is, only 1 of the 7 XI servers successfully passes no-auth sessions when clicked to navigate to the XI server. For example:

Successful session
Logged in as UID1, navigate to Tactical Overview in Fusion, click XI-server1: Result = Successful pass-through, displays Home Screen, shows logged in as fusionX, URL reads https://domain/nagiosxi/

Failed sessions
Logged in as UID1, navigate to Tactical Overview in Fusion, click XI-server2: Result = Failed pass-through, displays login screen, URL reads https://doamin/nagiosxi/login.php?redir ... f&noauth=1

Looking at httpd logs there isn't anything that stands out.

Please advise,

Re: Fusion no-auth issue across several XI servers

Posted: Wed May 07, 2014 10:13 am
by lmiltchev
Is "fusionX" set up for automatic log in on all of the fused servers (Admin->Automatic Login)?

Re: Fusion no-auth issue across several XI servers

Posted: Wed May 07, 2014 10:29 am
by TBT
No, auto-login is not configured on any of the fused XI servers, including the one that works.

Re: Fusion no-auth issue across several XI servers

Posted: Wed May 07, 2014 10:55 am
by lmiltchev
Can you give us some details on how the "fusionX" user is configured to authenticate? Are you using AD? We will try to recreate the issue in house.

Re: Fusion no-auth issue across several XI servers

Posted: Wed May 07, 2014 11:02 am
by TBT
As stated above, the accounts have been created in XI.

Authorization Level: User
Can see all hosts and services: Checked
Has read-only access: Checked

These settings have been verified to be the same across all XI servers.

Re: Fusion no-auth issue across several XI servers

Posted: Wed May 07, 2014 2:24 pm
by lmiltchev
It seems like this is a bug in Fusion. I filed an internal bug report on that (TASK ID 2793) and our Fusion developer will be looking into this as soon as he can. I expect this to be fixed in the next Fusion release.

Re: Fusion no-auth issue across several XI servers

Posted: Wed May 28, 2014 11:14 am
by jomann
Just wanted to make a note that this issue is fixed in 2014 (coming out soon) - there should now be seamless logins into all of the XI servers associated with fusion.

Re: Fusion no-auth issue across several XI servers

Posted: Tue Jun 03, 2014 2:46 pm
by TBT
Confirmed to be working correctly in Fusion 2014R1.0.

Re: Fusion no-auth issue across several XI servers

Posted: Tue Jun 03, 2014 2:48 pm
by tmcdonald
TBT wrote:Confirmed to be working correctly in Fusion 2014R1.0.
Awesome, thanks for the confirmation! This has been on our radar for a bit so it's nice to know it is working as intended!

Re: Fusion no-auth issue across several XI servers

Posted: Wed Jun 11, 2014 1:31 pm
by TBT
8 days later, I noticed this issue still remains. Pass-though is again not working. Please advise.

Update: Roughly an hour later, it is working again. Very odd. What is your opinion on this?