Access to views without user ticket

Post by **WillemDH** » Thu Feb 19, 2015 7:17 am

Hello,

We have an infoscreen with rotating views. We are running this on a basic terminal and configured Firefox pocket edition to start automatically. In the past I was able to create a link to a dashboard with a username and ticket which can be accessed without logging in.
The url was formed like this:
http://nagiosserver/nagiosxi/dashboards ... 5h4julnfcv

I've been trying to accomplish the same with the views page, but I did not found how to this for views

http://nagiosserver/nagiosxi/views/user ... m8rnlm3lgm

Any tip how to create an url linking to a rotating view with a username and ticket in?

Thanks and grtz.

Willem

scottwilkerson · Post by **scottwilkerson** » Thu Feb 19, 2015 8:25 am

use

Code: Select all

http://nagiosserver/nagiosxi/views/?username=infoscreen&ticket=099hm60c2e4o30utkaoqnderty2ere2sk8badbmdmn5ml2ka9a2vmpm8rnlm3lgm

It was missing the ?

also, it is worth pointing out that the rotating views rely on the whole framed page, so you cannot just get the inner-view without the menu items

Post by **WillemDH** » Fri Feb 20, 2015 5:44 am

Scott,

It works with the ?''. Thanks.

Would it be a doable feature request to make it possible to generate an url which can start a rotating view of the innerview? As at the moment we would have to manually click each day on the blue icon in the left top corner.

Grtz

Willem

scottwilkerson · Post by **scottwilkerson** » Fri Feb 20, 2015 9:10 am

I'm going to have to think about this.

We may be able to add something to the querystring that if present magically does the equivalent of clicking the blue triangle, but we need to for sure keep all of the framing as that's where it gets the list of items to rotate from.

Post by **WillemDH** » Thu Mar 05, 2015 4:46 am

Hey Scott,

Some other question related to views. We have a custom url dashlet containing a NagVis map in some of the views.

So as ideally we would like to evolve to a system which we can boot and automatically starts a browser which starts rotating views without any user interaction. At the moment I have to manually log into this terminal every day, click on the litle blue icon to maximize the views and then click on ok in the popup from nagVis asking for credentials.
I don't have always time to do this every morning and for 'green it' reasons we have to shut down the terminal at night. If I don't click the blue icon to maximize the view, this is not a superbig issue. But the popup from NagVis is in fact a much bigger annoyance as it completely blocks the current view. Is there some way to create an url which automatically logs into NagVis with a readonly user?

Grtz

Willem

Post by **lmiltchev** » Thu Mar 05, 2015 12:28 pm

Boy, I spent some time on this one...

Anyway, I was able to make it work. Here's what I did:
1. Created a readonly user in Nagios XI and logged in once to accept the license agreement.
2. Created the same (readonly) user in NagVis.
3. Created a "readonly.html" file and placed it in the "/var/www/html" directory:

Code: Select all

<html>
   <head>
        <title>NagVis 1.5.9 › Log In</title>
        <script language="javascript">
        function login(){
                window.document.loginform.submit();
        }
        </script>
   </head>
   <body onload="login()">
        <form action="http://<IP ADDRESS>/nagvis/frontend/nagvis-js/index.php?mod=Rotation&act=view&show=demo" method="POST" name="loginform">
        <input type="hidden" name="destination" value="http://<IP ADDRESS>/nagvis/frontend/nagvis-js/index.php?mod=Rotation&act=view&show=demo">
        <input type="hidden" name="flags" value="0">
        <input type="text" name="_username" value="readonly">
        <input type="password" name="_password" value="readonly">
        <input type="submit" value="Login" name="SubmitCreds">
        </form>
   </body>
</html>

4. Logged in NagVis:

Code: Select all

http://<IP ADDRESS>/readonly.html

You will need to login once and save the password, but after that it should auto-log you in. Change the rotation method according to your setup (I just used the demo).

Let me know if this worked.

Post by **WillemDH** » Fri Mar 06, 2015 5:16 am

Ludmill,

Thanks for taking the time to help me out with this! I've been trying to make it work for several hours now, but I'm still stuck. I guess I'm not the only one wanting to use NagVis maps in dashboards with custom url dashlet, your if we get this working your effort will help others too.

So I set:

Code: Select all

<html>
   <head>
        <title>NagVis 1.5.9 › Log In</title>
        <script language="javascript">
        function login(){
                window.document.loginform.submit();
        }
        </script>
   </head>
   <body onload="login()">
        <form action="http://nagiosserver/nagvis/frontend/nagvis-js/index.php?mod=Map&act=view&show=SB_Monitoring_Overview method="POST" name="loginform">
        <input type="hidden" name="destination" value="http://srvnagios01/nagvis/frontend/nagvis-js/index.php?mod=Map&act=view&show=SB_Monitoring_Overview">
        <input type="hidden" name="flags" value="0">
        <input type="text" name="_username" value="sys_infoscreen">
        <input type="password" name="_password" value="password">
        <input type="submit" value="Login" name="SubmitCreds">
        </form>
   </body>
</html>

The first map in the view is "SB_Monitoring_Overview". We do not use rotating in NagVis, but use the views to rotate, so the nagVis map in each view should stay the same. So I then added a new custom url dashlet linking to "http://<IP ADDRESS>/readonly.html" as you said.

When I first clean all the saved passwords (in the Firefox protable edition on the terminal) and then start the web interface with this script:

Code: Select all

Set objShell = CreateObject( "WScript.Shell" )
objshell.Popup "De netwerkinterface wordt gestart. Even geduld...",10,"", 64
'strResult = 1

'do while strResult = 1	'continue when LAN active
	'strResult = objShell.Run("cmd /c ping -n 1 adocmwgent.be",0,True)
'Loop

'do while strResult = 0	'contineous loop
	strcmd = "cmd /c start /w """" " & chr(34) & "D:\FirefoxPortable\FirefoxPortable.exe" & chr(34) & " " & chr(34) & "http://nagiosserver/nagiosxi/views/?username=sys_infoscreen&ticket=099m60c2e4o30utkaoqndopk42efzefzefnaeklfnazklfnklaznfazklnblabla"
	objShell.run strcmd,0,True
	'objshell.Popup "De Nagios interface wordt gestart. Even geduld...",3,"",64
'loop

The view opens without having to use Nagios XI credentials, as the ticket is passed in the vb script. Then I get a popup "Authentication required" which asks for my credentials. AFter entering username and password, I get the option to remember the password. See screenshots. After clicking "remember the password", I'm logged. So then I close my Firefox protable and reopen it. After which I get another popup "authentication required", where the credentials are already set, so I only need to click Ok, but it's still not logging in automatically?
Am I forgetting something?

Besides the issue above it also always shows the NagVis overview page instead of the map I set in the url. (see screenshot)

Please advise how to continue making this work. I have the feeling i'm almost there...

<complain-mode>EDIT: Oh man this nagVis annoys me sometimes. I kind of hope you guys are working on some way to show dynamic images with host / service status icons natively on XI dashboards. Or find a way to integrate NagVis completely into XI. I don't know, but the current way of working is really not admin or user friendly... </complain-mode>

Grtz and thanks! (really)

Willem

Post by **tgriep** » Fri Mar 06, 2015 12:08 pm

The password save issue maybe a Firefox problem. Can you try Internet Explorer?

Can you upload this file so we can look at the name of your map?

Code: Select all

/usr/local/nagvis/etc/nagvis.ini.php

Post by **WillemDH** » Mon Mar 09, 2015 4:26 am

Tom,

This is the content of /usr/local/nagvis/etc/nagvis.ini.php:

Code: Select all

; <?php return 1; ?>
; the line above is to prevent
; viewing this file from web.
; DON'T REMOVE IT!

; ----------------------------
; Default NagVis Configuration File
; At delivery everything here is commented out. The default values are set in the NagVis code.
; You can make your changes here, they'll overwrite the default settings.
; ----------------------------

; ----------------------------
; !!! The sections/variables with a leading ";" won't be recognised by NagVis (commented out) !!!
; ----------------------------

; General options which affect the whole NagVis installation
[global]
; Enable/Disable logging of security related user actions in Nagvis. For
; example user logins and logouts are logged in var/nagvis-audit.log
;audit_log="1"
;
; Defines the authentication module to use. By default NagVis uses the built-in
; SQLite authentication module. On delivery there is no other authentication
; module available. It is possible to add own authentication modules for
; supporting other authorisation mechanisms. For details take a look at the
; documentation.
;authmodule="CoreAuthModSQLite"
;
; Defines the authorisation module to use. By default NagVis uses the built-in
; SQLite authorisation module. On delivery there is no other authorisation
; module available. It is possible to add own authorisation modules for
; supporting other authorisation mechanisms. For details take a look at the
; documentation.
;authorisationmodule="CoreAuthorisationModSQLite"
;
; Dateformat of the time/dates shown in nagvis (For valid format see PHP docs)
;dateformat="Y-m-d H:i:s"
;
; Defines which translations of NagVis are available to the users
;language_available="de_DE,en_US,es_ES,fr_FR,pt_BR"
; Language detection steps to use. Available:
;  - User:    The user selection
;  - Session: Language saved in the session (Usually set after first setting an
;             explicit language)
;  - Browser: Detection by user agent information from the browser
;  - Config:  Use configured default language (See below)
;language_detection="user,session,browser,config"
;
; Select language (Available by default: en_US, de_DE, fr_FR, pt_BR)
;language="en_US"
;
; Defines the logon module to use. There are three logon modules to be used by
; default. It is possible to add own logon modules for serving other dialogs or
; ways of logging in. For details take a look at the documentation.
;
; The delivered modules are:
;
; LogonMixed: The mixed logon module uses the LogonEnv module as default and
; the LogonDialog module as fallback when LogonEnv returns no username. This
; should fit the requirements of most environments.
;
; LogonDialog: This is an HTML logon dialog for requesting authentication
; information from the user.
;
; LogonEnv: It is possible to realise a fully "trusted" authentication
; mechanism like all previous NagVis versions used it before. This way the user
; is not really authenticated with NagVis. NagVis trusts the provided username
; implicitly. NagVis uses the configured environment variable to identify the
; user. You can add several authentication mechanisms to your webserver,
; starting from the basic authentication used by Nagios (.htaccess) to single
; sign-on environments.
; Simply set logonmodule to "LogonEnv", put the environment variable to use as
; username to the option logonenvvar and tell the authentication module to
; create users in the database when provided users does not exist. The option
; logonenvcreaterole tells the module to assign the new user to a specific role
; set to empty string to disable that behaviour.
logonmodule="LogonEnv"
logonenvvar="PHP_AUTH_USER"
;logonenvcreateuser="1"
;logonenvcreaterole="Guests"
;
; Default rotation time of pages in rotations
;refreshtime=60
;
; Some user information is stored in sessions which are identified by session
; cookies placed on the users computer. The options below set the properties
; of the session cookie.
; Domain to set the cookie for. By default NagVis tries to auto-detect this
; options value by using the webserver's environment variables.
;sesscookiedomain="auto-detect"
; Absolute web path to set the cookie for. This defaults to configured
; paths/htmlbase option
;sesscookiepath="/nagvis"
; Lifetime of the NagVis session cookie in seconds. The default value is set to
; 24 hours. The NagVis session cookie contents will be renewed on every page
; visit. If a session is idle for more time than configured here it will become
; invalid.
;sesscookieduration="86400"
;
; Start page to redirect the user to when first visiting NagVis without
; special parameters.
;startmodule="Overview"
;startaction="view"
; The startshow parameter is only used by some views at the moment. It is used
; by the Map and the AutoMap modules.
;startshow=""

; Path definitions
[paths]
; absolute physical NagVis path
;base="/usr/local/nagvis/"
; absolute html NagVis path
;htmlbase="/nagvis"
; absolute html NagVis cgi path
htmlcgi="/nagiosxi/includes/components/xicore"

; Default values which get inherited to the maps and its objects
[defaults]
; default backend (id of the default backend)
backend="ndomy_1"
; background color of maps
;backgroundcolor="#ffffff"
; Enable/Disable the context menu on map objects. With the context menu you are
; able to bind commands or links to your map objects
;contextmenu=1
; Choose the default context template
;contexttemplate="default"
; Enable/Disable changing background color on state changes (Configured color is
; shown when summary state is PENDING, OK or UP)
;eventbackground=0
; Enable/Disable highlighting of the state changing object by adding a flashing
; border
;eventhighlight=1
; The duration of the event highlight in milliseconds (10 seconds by default)
;eventhighlightduration=10000
; The interval of the event highlight in milliseconds (0.5 seconds by default)
;eventhighlightinterval=500
; Enable/Disable the eventlog in the new javascript frontend. The eventlog keeps
; track of important actions and information
;eventlog=0
; Loglevel of the eventlog (available: debug, info, warning, critical)
;eventloglevel="info"
; Height of the eventlog when visible in px
;eventlogheight="75"
; Hide/Show the eventlog on page load
;eventloghidden="1"
; Enable/Disable scrolling to the icon which changed the state when the icon is
; out of the visible scope
;eventscroll=1
; Enable/Disable sound signals on state changes
;eventsound=1
; enable/disable header menu
;headermenu="1"
; header template
;headertemplate="default"
; Enable/Diable the fading effect of the submenus in the header menu
;headerfade=1
; enable/disable hover menu
;hovermenu=1
; hover template
;hovertemplate="default"
; hover menu open delay (seconds)
;hoverdelay=0
; show children in hover menus
;hoverchildsshow=1
; limit shown child objects to n
;hoverchildslimit="10"
; order method of children (desc: descending, asc: ascending)
;hoverchildsorder="asc"
; sort method of children (s: state, a: alphabetical)
;hoverchildssort="s"
; default icons
;icons="std_medium"
; recognize only hard states (not soft)
;onlyhardstates=0
; recognize service states in host/hostgroup objects
;recognizeservices=1
; show map in lists (dropdowns, index page, ...)
;showinlists=1
; show map in multisite snapin
;showinmultisite=1
; Name of the custom stylesheet to use on the maps (The file needs to be located
; in the share/nagvis/styles directory)
;stylesheet=""
; target for the icon links
;urltarget="_self"
; URL template for host object links
hosturl="[htmlcgi]/status.php?host=[host_name]"
; URL template for hostgroup object links
hostgroupurl="[htmlcgi]/status.php?show=services&hostgroup=[hostgroup_name]"
; URL template for service object links
serviceurl="[htmlcgi]/status.php?show=servicedetail&host=[host_name]&service=[service_description]&dest=auto"
; URL template for servicegroup object links
servicegroupurl="[htmlcgi]/status.php?show=services&servicegroup=[servicegroup_name]"
; URL template for nested map links
;mapurl="[htmlbase]/index.php?mod=Map&act=view&show=[map_name]"

; Options to configure the Overview page of NagVis
[index]
; Color of the overview background
;backgroundcolor=#ffffff
; Set number of map cells per row
;cellsperrow=4
; enable/disable header menu
;headermenu="1"
; header template
;headertemplate="default"
; Enable/Disable automap listing
;showautomaps=1
; Enable/Disable map listing
;showmaps=1
; Enable/Disable geomap listing
;   Note: It is disabled here since it is unfinished yet and not for production
;         use in current 1.5 code.
;showgeomap=0
; Enable/Disable rotation listing
;showrotations=1
; Enable/Disable map thumbnails
;showmapthumbs=0

; Options for the Automap
[automap]
; Default URL parameters for links to the automap
;defaultparams="&childLayers=2"
; Default root host (NagVis uses this if it can't detect it via NDO)
;defaultroot=""
; Path to the graphviz binaries (dot,neato,...); Only needed if not in ENV PATH
;graphvizpath="/usr/bin/"
; Show the automap in the lists (Map index and dropdown menu in header)
;showinlists=1
defaultroot="nagiosserver"

; Options for the WUI
[wui]
; Users which are allowed to change the NagVis configuration (comma separated list)
;allowedforconfig=EVERYONE
; auto update frequency
;autoupdatefreq=25
; enable/disable header menu in the WUI
;headermenu="1"
; header template to use in the WUI
;headertemplate="default"
; map lock time (minutes)
;maplocktime=5

; Options for the new Javascript worker
[worker]
; The interval in seconds in which the worker will check for objects which need
; to be updated
;interval=10
; The maximum number of parameters used in ajax http requests
; Some intrusion detection/prevention systems have a problem with
; too many parameters in the url. Give 0 for no limit.
;requestmaxparams=0
; The maximum length of http request urls during ajax http requests
; Some intrusion detection/prevention systems have a problem with
; queries being too long
;requestmaxlength=1900
; The retention time of the states in the frontend in seconds. The state
; information will be refreshed after this time
;updateobjectstates=30

; ----------------------------
; Backend definitions
; ----------------------------

; Example definition of a livestatus backend.
; In this case the backend_id is live_1
; The path /usr/local/nagios/var/rw has to exist
[backend_live_1]
backendtype="mklivestatus"
; The status host can be used to prevent annoying timeouts when a backend is not
; reachable. This is only useful in multi backend setups.
;
; It works as follows: The assumption is that there is a "local" backend which
; monitors the host of the "remote" backend. When the remote backend host is
; reported as UP the backend is queried as normal.
; When the remote backend host is reported as "DOWN" or "UNREACHABLE" NagVis won't
; try to connect to the backend anymore until the backend host gets available again.
;
; The statushost needs to be given in the following format:
;   "<backend_id>:<hostname>" -> e.g. "live_2:nagios"
;statushost=""
;socket="unix:/usr/local/nagios/var/rw/live"

; Example definition for a MySQL backend
; in this example the ID of the Backend is "ndomy_1" you can define another ID.
[backend_ndomy_1]
; type of backend - MUST be set
backendtype="ndomy"
; The status host can be used to prevent annoying timeouts when a backend is not
; reachable. This is only useful in multi backend setups.
;
; It works as follows: The assumption is that there is a "local" backend which
; monitors the host of the "remote" backend. When the remote backend host is
; reported as UP the backend is queried as normal.
; When the remote backend host is reported as "DOWN" or "UNREACHABLE" NagVis won't
; try to connect to the backend anymore until the backend host gets available again.
;
; The statushost needs to be given in the following format:
;   "<backend_id>:<hostname>" -> e.g. "live_2:nagios"
;statushost=""
; hostname for NDO-db
;dbhost="localhost"
; portname for NDO-db
;dbport=3306
; database name for NDO-db
;dbname="nagios"
; username for NDO-db
dbuser="ndoutils"
; password for NDO-db
dbpass="n@gweb"
; prefix for tables in NDO-db
;dbprefix="nagios_"
; instance name for tables in NDO-db
dbinstancename="localhost"
; maximum delay of the NDO Database in seconds
;maxtimewithoutupdate=180
; path to the cgi-bin of this backend
;htmlcgi="/nagios/cgi-bin"

; Example definition of a Merlin backend
; in this example the ID of the Backend is "merlinmy_1" you can define another ID.
[backend_merlinmy_1]
; type of backend - MUST be set
backendtype="merlinmy"
; hostname for Merlin db
;dbhost="localhost"
; portname for Merlin db
;dbport=3306
; database name for Merlin db
;dbname="merlin"
; username for Merlin db
;dbuser="merlin"
; password for Merlin db
;dbpass="merlin"
; maximum delay of the Merlin Database in seconds
;maxtimewithoutupdate=180
; path to the cgi-bin of this backend
;htmlcgi="/nagios/cgi-bin"

; ----------------------------
; Rotation pool definitions
; ----------------------------

; in this example the browser switches between the maps demo and demo2 every 15
; seconds, the rotation is enabled by url: index.php?rotation=demo
[rotation_demo]
; These steps are rotated. The "Demo2:" is a label which is being displayed in
; the index pages rotation list.
; You may also add external URLs as steps. Simply enclose the url using []
; instead of the map name. It is also possible to add automaps to rotations,
; add an @ sign before the automap name to add an automap to the rotation.
maps="demo,Demo2:demo2"
; rotation interval (seconds)
interval=15

; ------------------------------------------------------------------------------
; Below you find some advanced stuff
; ------------------------------------------------------------------------------

; Configure different state related settings
[states]
; State coverage/weight: This defines the state handling behaviour. For example
; a critical state will cover a warning state and an acknowledged critical
; state will not cover a warning state.
;
; These options are being used when calculating the summary state of the map
; objects. The default values should fit most needs.
;
;unreachable=9
;unreachable_ack=5
;unreachable_downtime=5
;down=8
;down_ack=5
;down_downtime=5
;critical=7
;critical_ack=5
;critical_downtime=5
;warning=6
;warning_ack=4
;warning_downtime=4
;unknown=3
;unknown_ack=2
;unknown_downtime=2
;error=3
;error_ack=2
;error_downtime=2
;up=1
;ok=1
;pending=0
;
; Colors of the different states. The colors are used in lines and hover menus
; and for example in the frontend highlight and background event handler
;
;unreachable_bgcolor=#F1811B
;unreachable_color=#F1811B
;unreachable_ack_bgcolor=
;unreachable_downtime_bgcolor=
;down_bgcolor=#FF0000
;down_color=#FF0000
;down_ack_bgcolor=
;down_downtime_bgcolor=
;critical_bgcolor=#FF0000
;critical_color=#FF0000
;critical_ack_bgcolor=
;critical_downtime_bgcolor=
;warning_bgcolor=#FFFF00
;warning_color=#FFFF00
;warning_ack_bgcolor=
;warning_downtime_bgcolor=
;unknown_bgcolor=#FFCC66
;unknown_color=#FFCC66
;unknown_ack_bgcolor=
;unknown_downtime_bgcolor=
;error_bgcolor=#0000FF
;error_color=#0000FF
;up_bgcolor=#00FF00
;up_color=#00FF00
;ok_bgcolor=#00FF00
;ok_color=#00FF00
;pending_bgcolor=#C0C0C0
;pending_color=#C0C0C0
;
; Sound of the different states to be used by the sound eventhandler in the
; frontend. The sounds are only being fired when changing to some
; worse state.
;
;unreachable_sound=std_unreachable.mp3
;down_sound=std_down.mp3
;critical_sound=std_critical.mp3
;warning_sound=std_warning.mp3
;unknown_sound=
;error_sound=
;up_sound=
;ok_sound=
;pending_sound=

; -------------------------
; EOF
; -------------------------

We tried using IE, but the terminal is on IE8 and it doesn't work at all it seems on IE8...

Grtz

Post by **WillemDH** » Mon Mar 09, 2015 5:18 am

Well, we found an alternative solution. By using AutoIt, we send an "Enter" to the screen 60 seconds after is is opened. Then we do a mouseclick on the blue expand icon, so we got that solved too. It's no longer necessary to invest time in this. Although in time a 'cleaner' solution would be nice, as using AutoIt is a bit of a dirty solution.

https://www.autoitscript.com/autoit3/do ... s/Send.htm

Thanks for all the time you put in it.

Nagios Support Forum

Access to views without user ticket

Access to views without user ticket

Re: Access to views without user ticket

Re: Access to views without user ticket

Re: Access to views without user ticket

Re: Access to views without user ticket

Re: Access to views without user ticket

Re: Access to views without user ticket

Re: Access to views without user ticket

Re: Access to views without user ticket

Re: Access to views without user ticket