Page 1 of 1

Install succeeded.. but not really

Posted: Thu Mar 03, 2016 3:06 pm
by gwakem
I have installed network analyzer (2.2.0, grabbed via wget http://assets.nagios.com/downloads/nagi ... est.tar.gz) and running the ./fullinstall seemed to work correctly with no blatant errors. However, when I go to http://x.x.x.x/nagiosna/, I get a 403 forbidden: Forbidden You don't have permission to access /nagiosna/ on this server.

Checking the logs I see this: [Thu Mar 03 14:45:47.787122 2016] [core:error] [pid 19183] (13)Permission denied: [client x.x.x.x:42810] AH00035: access to /nagiosna/ denied (filesystem path '/var/www/html/nagiosna/www') because search permissions are missing on a component of the path.

Since this was entirely configured by the fullinstall script, I'm not sure what happened there. Any ideas? Alternatively, anything I can provide to help troubleshooting?

Re: Install succeeded.. but not really

Posted: Thu Mar 03, 2016 3:52 pm
by tgriep
What Operating system and version did you install NA on?
Can you login to the server, run the following commands and post the output?

Code: Select all

ps -ef
chage -l nna
grep nn /etc/group
 ls -l /var/www/html/nagiosna/www
Can you post the install.log file from the folder you ran the fullinstall from?

Re: Install succeeded.. but not really

Posted: Thu Mar 03, 2016 6:52 pm
by gwakem
Sorry, I should have included that. Long day! This is a Red Hat 7.2 system. I have attached the output to all commands and the log requested below.

Re: Install succeeded.. but not really

Posted: Fri Mar 04, 2016 10:36 am
by lmiltchev
Run the following command:

Code: Select all

chmod go+r /var/www/html/nagiosna/www/index.php
then try to log in the web UI again.

What is the output of the following commands?

Code: Select all

sestatus
service iptables status

Re: Install succeeded.. but not really

Posted: Fri Mar 04, 2016 10:43 am
by gwakem
10:40:29 [root@netanalyzer www]# sestatus
SELinux status: disabled
10:40:53 [root@netanalyzer www]# service iptables status
Redirecting to /bin/systemctl status iptables.service
? iptables.service
Loaded: masked (/dev/null)
Active: inactive (dead)

I still get the Forbidden message. I was looking at this last night and I noticed the permissions on the folders were all 700.

Re: Install succeeded.. but not really

Posted: Fri Mar 04, 2016 2:11 pm
by ssax
While not a problem yet, let's fix the password expiration:

Code: Select all

passwd nna
passwd -d nna
chage -I -1 -m 0 -M 99999 -E -1 nna
Then run this command and attach the resulting /tmp/nnaperms.txt file:

Code: Select all

getfacl -R nagiosna /var/www/html/nagiosna > /tmp/nnaperms.txt
Also, please zip up and attach your /etc/httpd/conf/httpd.conf file and your /etc/httpd/conf.d/nagiosna.conf file so that we can review them.

Thank you

Re: Install succeeded.. but not really

Posted: Fri Mar 04, 2016 2:26 pm
by gwakem
The password expiration has been updated, and I have attached the requested files. Thanks!

Re: Install succeeded.. but not really

Posted: Fri Mar 04, 2016 3:04 pm
by ssax
Please unzip the attached file and put it in your /tmp directory, then run these commands:

Code: Select all

cd /
setfacl --restore=/tmp/pristine_nna_perms.txt
service httpd restart
Then see if it's still broken for you and let us know the results.
pristine_nna_perms.zip

Re: Install succeeded.. but not really

Posted: Fri Mar 04, 2016 3:23 pm
by gwakem
That did it! Thanks for your help. This ticket is good to close if needed.

Re: Install succeeded.. but not really

Posted: Mon Mar 07, 2016 9:30 am
by lmiltchev
That did it! Thanks for your help. This ticket is good to close if needed.
Great! I am marking this topic as "resolved".