Unable to Acknowledge Services
Posted: Mon Apr 11, 2016 1:28 pm
by chicjo01
I have AD/LDAP users of different permission levels unable to acknowledge services or add comments. Using a local user of the same permission level does work correctly. Can you shed some light on this?
User 1: AD/LDAP Admin
User 2: AD / LDAP User
Capture.PNG
When the users try to acknowledge service, it does not take affect. I have checked the logs for the event, but unable to find the event.
Note: I am using an Offloaded DB server
Logs I checked:
/var/log/httpd/error.log
/var/log/httpd/ssl_error.log
/usr/local/nagios/var/nagios.log
/var/log/mariadb/mariadb.log
/var/log/cron
Re: Unable to Acknowledge Services
Posted: Mon Apr 11, 2016 1:39 pm
by hsmith
What version of XI is this?
Re: Unable to Acknowledge Services
Posted: Mon Apr 11, 2016 2:24 pm
by chicjo01
Version: 5.2.7
Re: Unable to Acknowledge Services
Posted: Mon Apr 11, 2016 4:29 pm
by rkennedy
Are there any 'special' characters in the LDAP username?
Additionally, can you show the rest of the screen for the user in question? I had an issue similar to this, and it was because the capitalizations / lowercases didn't line up properly in the cgi.cfg. Can you also post this file?
Re: Unable to Acknowledge Services
Posted: Mon Apr 11, 2016 4:35 pm
by chicjo01
I do not have permission from the User 2 to display the information. I am User 1 and I have provided the information below.
Capture.PNG
Re: Unable to Acknowledge Services
Posted: Mon Apr 11, 2016 4:54 pm
by rkennedy
Can you also post the cgi.cfg file? We'll need to see how that lines up too.
Re: Unable to Acknowledge Services
Posted: Tue Apr 12, 2016 7:23 am
by chicjo01
Does the apply configuration add the users into the cgi.cfg, based on the permission levels? Which specific permission level provide the ability to acknowledge, schedule downtime, unacknowledge, add comments, etc??
# MODIFIED
default_statusmap_layout=6
# UNMODIFIED
action_url_target=_blank
authorized_for_all_host_commands=nagiosadmin,nagiosadmin,devops,ChicJo01,SandCr01,weinerdd,HodgWa01,bradyhx,AronGl01,BellinMR,FabiSa01,ChicJo01,SandCr01,weinerdd,HodgWa01,bradyhx,AronGl01
authorized_for_all_hosts=nagiosadmin,nagiosadmin,devops,ChicJo01,SandCr01,weinerdd,HodgWa01,bradyhx,AronGl01,BellinMR,FabiSa01,ChicJo01,readonly,SandCr01,weinerdd,HodgWa01,bradyhx,AronGl01
authorized_for_all_service_commands=nagiosadmin,nagiosadmin,devops,ChicJo01,SandCr01,weinerdd,HodgWa01,bradyhx,AronGl01,BellinMR,FabiSa01,ChicJo01,SandCr01,weinerdd,HodgWa01,bradyhx,AronGl01
authorized_for_all_services=nagiosadmin,nagiosadmin,devops,ChicJo01,SandCr01,weinerdd,HodgWa01,bradyhx,AronGl01,BellinMR,FabiSa01,ChicJo01,readonly,SandCr01,weinerdd,HodgWa01,bradyhx,AronGl01
authorized_for_configuration_information=nagiosadmin,nagiosadmin,devops,ChicJo01,SandCr01,weinerdd,HodgWa01,bradyhx,AronGl01,BellinMR,FabiSa01,ChicJo01,readonly,SandCr01,weinerdd,HodgWa01,bradyhx,AronGl01
authorized_for_system_commands=nagiosadmin,nagiosadmin,devops,ChicJo01,SandCr01,weinerdd,HodgWa01,bradyhx,AronGl01,ChicJo01,SandCr01,weinerdd,HodgWa01,bradyhx,AronGl01
authorized_for_system_information=nagiosadmin,nagiosadmin,devops,ChicJo01,SandCr01,weinerdd,HodgWa01,bradyhx,AronGl01,ChicJo01,SandCr01,weinerdd,HodgWa01,bradyhx,AronGl01
default_statuswrl_layout=4
escape_html_tags=1
lock_author_names=1
main_config_file=/usr/local/nagios/etc/nagios.cfg
notes_url_target=_blank
physical_html_path=/usr/local/nagios/share
ping_syntax=/bin/ping -n -U -c 5 $HOSTADDRESS$
refresh_rate=90
show_context_help=0
url_html_path=/nagios
use_authentication=1
use_pending_states=1
use_ssl_authentication=0
authorized_for_read_only=readonly
Re: Unable to Acknowledge Services
Posted: Tue Apr 12, 2016 10:12 am
by lmiltchev
Did you modify the cfg.cfg manually?
When users are added, any capital letters should be changed to lowercase. I added a "ChicJo01" user to my test XI box, and checked the cgi.cfg file. I see "chicjo01" added to all "authorized_for_" lines (lowercase), NOT "ChicJo01".
Try changing "ChicJo01" to "chicjo01", save, exit, and restart nagios & apache:
Code: Select all
service httpd restart
service nagios restart
Did this help?
Re: Unable to Acknowledge Services
Posted: Tue Apr 12, 2016 10:25 am
by chicjo01
That corrected the issue. Thank you. I will switch the users having issue over to lowercase based on the username. This issue can be closed.
Re: Unable to Acknowledge Services
Posted: Tue Apr 12, 2016 11:06 am
by lmiltchev
Great! I am glad I could help!
I am locking the thread.