Page 1 of 3

Sorry, but you are not authorized to commit the specifie

Posted: Sat Mar 28, 2015 8:04 am
by bosecorp
When I try to acknowledge an alert all while logged in to the Nagios web interface as nagiosadmin, I get a message which says:

Sorry, but you are not authorized to commit the specified command.

Re: Sorry, but you are not authorized to commit the specifie

Posted: Sun Mar 29, 2015 7:11 pm
by Box293
Is the user account you are logged in as a read only user?

Admin > Users > Manage Users

Re: Sorry, but you are not authorized to commit the specifie

Posted: Mon Mar 30, 2015 9:15 am
by bosecorp
I am the admin

Re: Sorry, but you are not authorized to commit the specifie

Posted: Mon Mar 30, 2015 11:14 am
by abrist
Does the command pipe exist?

Code: Select all

ls -la /usr/local/nagios/var/rw
Is cgi.cfg configured correctly?

Code: Select all

grep nagiosadmin /usr/local/nagios/etc/cgi.cfg
Have you implemented ldap/AD authentication in XI recently?

Re: Sorry, but you are not authorized to commit the specifie

Posted: Mon Mar 30, 2015 11:28 am
by bosecorp
I have not...


root@nagmonus1:(03-30 12:27): /root
# ls -la /usr/local/nagios/var/rw
total 16
drwxrwsr-x 2 nagios nagios 4096 Mar 30 12:11 .
drwxrwxr-x 6 nagios nagios 12288 Mar 30 12:27 ..
prw-rw---- 1 nagios nagios 0 Mar 30 12:11 nagios.cmd
srw-rw---- 1 nagios nagios 0 Mar 30 12:11 nagios.qh
root@nagmonus1:(03-30 12:27): /root
# ^C
root@nagmonus1:(03-30 12:27): /root
# grep nagiosadmin /usr/local/nagios/etc/cgi.cfg
authorized_for_all_host_commands=nagiosadmin,ev12190,sj820523,ww15785,dm17745,mn14579,nn71100,gp7238,bg15022,ve12189,sk1009253,pm820550,nagiosadmin,bs1006029,mm38597,kp46240,sm1007622,el872784,ab20256,dcops
authorized_for_all_hosts=nagiosadmin,ev12190,sj820523,ww15785,dm17745,mn14579,nn71100,gp7238,bg15022,ve12189,sk1009253,pm820550,nagiosadmin,bs1006029,mm38597,kp46240,sm1007622,el872784,ab20256,fusion,dcops,jc13935,pp71402,mb3565,tt12422
authorized_for_all_service_commands=nagiosadmin,ev12190,sj820523,ww15785,dm17745,mn14579,nn71100,gp7238,bg15022,ve12189,sk1009253,pm820550,nagiosadmin,bs1006029,mm38597,kp46240,sm1007622,el872784,ab20256,dcops
authorized_for_all_services=nagiosadmin,ev12190,sj820523,ww15785,dm17745,mn14579,nn71100,gp7238,bg15022,ve12189,sk1009253,pm820550,nagiosadmin,bs1006029,mm38597,kp46240,sm1007622,el872784,ab20256,fusion,dcops,jc13935,pp71402,mb3565,tt12422
authorized_for_configuration_information=nagiosadmin,ev12190,sj820523,ww15785,dm17745,mn14579,nn71100,gp7238,bg15022,ve12189,sk1009253,pm820550,nagiosadmin,bs1006029,mm38597,kp46240,sm1007622,el872784,ab20256,fusion,dcops,jc13935,pp71402,mb3565,tt12422
authorized_for_system_commands=nagiosadmin,ev12190,sj820523,ww15785,dm17745,mn14579,nn71100,gp7238,bg15022,ve12189,sk1009253,pm820550,nagiosadmin,bs1006029,mm38597,kp46240,sm1007622,el872784,ab20256,dcops,tt12422
authorized_for_system_information=nagiosadmin,ev12190,sj820523,ww15785,dm17745,mn14579,nn71100,gp7238,bg15022,ve12189,sk1009253,pm820550,nagiosadmin,bs1006029,mm38597,kp46240,sm1007622,el872784,ab20256,dcops,tt12422
root@nagmonus1:(03-30 12:27): /root
#

Re: Sorry, but you are not authorized to commit the specifie

Posted: Mon Mar 30, 2015 1:42 pm
by lmiltchev
Can you run the following command and show us the output?

Code: Select all

grep nag /etc/group

Re: Sorry, but you are not authorized to commit the specifie

Posted: Mon Mar 30, 2015 2:07 pm
by bosecorp
# grep nag /etc/group
nagcmd:x:59016:apache,nagios
nagios:x:59991:nagios,apache
root@nagmonus1:(03-30 15:07): /root
#

Re: Sorry, but you are not authorized to commit the specifie

Posted: Mon Mar 30, 2015 3:07 pm
by abrist
Can you submit commands from the nagios core interface?

Code: Select all

http://<server ip>/nagios/

Re: Sorry, but you are not authorized to commit the specifie

Posted: Mon Mar 30, 2015 5:17 pm
by bosecorp
No, same result

Re: Sorry, but you are not authorized to commit the specifie

Posted: Mon Mar 30, 2015 5:22 pm
by Box293
Is SELinux enabled?

Code: Select all

getenforce
If is is, disable it:

Code: Select all

sed -i 's/SELINUX=enforcing/SELINUX=permissive/g' /etc/selinux/config
setenforce 0