Page 1 of 1

Forbidden You don't have permission to access /nagiosxi/ on

Posted: Thu Aug 11, 2016 10:29 am
by benhank
I'm getting this error when trying to log into xi. I can log into core with no problem.
i ran this command:

Code: Select all

tail -n50 /var/log/httpd/error_log

Code: Select all

[Wed Aug 10 14:33:10 2016] [error] [client 172.26.70.126] File does not exist: /usr/local/nagios/share/images/logos/ibmaix.jpg, referer: http://lkendrwatsonp01/nagios/cgi-bin/config.cgi?type=hosts
[Wed Aug 10 14:33:10 2016] [error] [client 172.26.70.126] File does not exist: /usr/local/nagios/share/images/logos/lis_hmc.jpg, referer: http://lkendrwatsonp01/nagios/cgi-bin/config.cgi?type=hosts
[Wed Aug 10 14:33:10 2016] [error] [client 172.26.70.126] File does not exist: /usr/local/nagios/share/images/logos/nagios.jpg, referer: http://lkendrwatsonp01/nagios/cgi-bin/config.cgi?type=hosts
[Wed Aug 10 14:33:10 2016] [error] [client 172.26.70.126] File does not exist: /usr/local/nagios/share/images/logos/netbackup_b.png, referer: http://lkendrwatsonp01/nagios/cgi-bin/config.cgi?type=hosts
[Wed Aug 10 14:33:10 2016] [error] [client 172.26.70.126] File does not exist: /usr/local/nagios/share/images/logos/monitoring1.png, referer: http://lkendrwatsonp01/nagios/cgi-bin/config.cgi?type=hosts
[Wed Aug 10 14:33:10 2016] [error] [client 172.26.70.126] File does not exist: /usr/local/nagios/share/images/logos/emc_vmax.png, referer: http://lkendrwatsonp01/nagios/cgi-bin/config.cgi?type=hosts
[Wed Aug 10 14:33:10 2016] [error] [client 172.26.70.126] File does not exist: /usr/local/nagios/share/images/logos/ncpa.png, referer: http://lkendrwatsonp01/nagios/cgi-bin/config.cgi?type=hosts
[Wed Aug 10 14:33:10 2016] [error] [client 172.26.70.126] File does not exist: /usr/local/nagios/share/images/logos/cisco_prime.jpg, referer: http://lkendrwatsonp01/nagios/cgi-bin/config.cgi?type=hosts
[Wed Aug 10 14:33:10 2016] [error] [client 172.26.70.126] File does not exist: /usr/local/nagios/share/images/logos/xerox dp90.jpg, referer: http://lkendrwatsonp01/nagios/cgi-bin/config.cgi?type=hosts
[Wed Aug 10 14:33:10 2016] [error] [client 172.26.70.126] File does not exist: /usr/local/nagios/share/images/logos/hp-ilo.png, referer: http://lkendrwatsonp01/nagios/cgi-bin/config.cgi?type=hosts
[Wed Aug 10 14:33:10 2016] [error] [client 172.26.70.126] File does not exist: /usr/local/nagios/share/images/logos/sherlock2.png, referer: http://lkendrwatsonp01/nagios/cgi-bin/config.cgi?type=hosts
[Wed Aug 10 14:33:10 2016] [error] [client 172.26.70.126] File does not exist: /usr/local/nagios/share/images/logos/zebra_printer.png, referer: http://lkendrwatsonp01/nagios/cgi-bin/config.cgi?type=hosts
[Wed Aug 10 14:33:20 2016] [error] [client 172.26.70.126] PHP Warning:  require_once(/usr/local/nagiosxi/html/includes/../config.inc.php): failed to open stream: No such file or directory in /usr/local/nagiosxi/html/includes/common.inc.php on line 10, referer: http://lkendrwatsonp01/
[Wed Aug 10 14:33:20 2016] [error] [client 172.26.70.126] PHP Fatal error:  require_once(): Failed opening required '/usr/local/nagiosxi/html/includes/../config.inc.php' (include_path='.:/usr/share/pear:/usr/share/php') in /usr/local/nagiosxi/html/includes/common.inc.php on line 10, referer: http://lkendrwatsonp01/
[Wed Aug 10 14:35:31 2016] [notice] caught SIGTERM, shutting down
[Wed Aug 10 14:38:58 2016] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Wed Aug 10 14:38:58 2016] [notice] Digest: generating secret for digest authentication ...
[Wed Aug 10 14:38:58 2016] [notice] Digest: done
[Wed Aug 10 14:38:59 2016] [notice] Apache/2.2.15 (Unix) DAV/2 PHP/5.3.3 mod_ssl/2.2.15 OpenSSL/1.0.1e-fips configured -- resuming normal operations
[Wed Aug 10 14:39:54 2016] [error] [client 172.26.70.126] PHP Warning:  date(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/New_York' for 'EDT/-4.0/DST' instead in /var/www/html/index.php on line 91
[Wed Aug 10 14:39:54 2016] [error] [client 172.26.70.126] PHP Warning:  date(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/New_York' for 'EDT/-4.0/DST' instead in /var/www/html/index.php on line 106
[Wed Aug 10 14:39:56 2016] [error] [client 172.26.70.126] PHP Warning:  require_once(/usr/local/nagiosxi/html/includes/../config.inc.php): failed to open stream: No such file or directory in /usr/local/nagiosxi/html/includes/common.inc.php on line 10, referer: http://lkendrwatsonp01/
[Wed Aug 10 14:39:56 2016] [error] [client 172.26.70.126] PHP Fatal error:  require_once(): Failed opening required '/usr/local/nagiosxi/html/includes/../config.inc.php' (include_path='.:/usr/share/pear:/usr/share/php') in /usr/local/nagiosxi/html/includes/common.inc.php on line 10, referer: http://lkendrwatsonp01/
[Wed Aug 10 16:07:43 2016] [error] [client 172.26.70.126] PHP Warning:  require_once(/usr/local/nagiosxi/html/includes/../config.inc.php): failed to open stream: No such file or directory in /usr/local/nagiosxi/html/includes/common.inc.php on line 10, referer: http://lkendrwatsonp01/
[Wed Aug 10 16:07:43 2016] [error] [client 172.26.70.126] PHP Fatal error:  require_once(): Failed opening required '/usr/local/nagiosxi/html/includes/../config.inc.php' (include_path='.:/usr/share/pear:/usr/share/php') in /usr/local/nagiosxi/html/includes/common.inc.php on line 10, referer: http://lkendrwatsonp01/
[Wed Aug 10 16:07:45 2016] [error] [client 172.26.70.126] PHP Warning:  require_once(/usr/local/nagiosxi/html/includes/../config.inc.php): failed to open stream: No such file or directory in /usr/local/nagiosxi/html/includes/common.inc.php on line 10, referer: http://lkendrwatsonp01/
[Wed Aug 10 16:07:45 2016] [error] [client 172.26.70.126] PHP Fatal error:  require_once(): Failed opening required '/usr/local/nagiosxi/html/includes/../config.inc.php' (include_path='.:/usr/share/pear:/usr/share/php') in /usr/local/nagiosxi/html/includes/common.inc.php on line 10, referer: http://lkendrwatsonp01/
[Wed Aug 10 16:59:26 2016] [error] [client 172.26.70.126] PHP Warning:  date(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/New_York' for 'EDT/-4.0/DST' instead in /var/www/html/index.php on line 91
[Wed Aug 10 16:59:26 2016] [error] [client 172.26.70.126] PHP Warning:  date(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/New_York' for 'EDT/-4.0/DST' instead in /var/www/html/index.php on line 106
[Wed Aug 10 16:59:28 2016] [error] [client 172.26.70.126] (13)Permission denied: access to /nagiosxi/ denied, referer: http://lkendrwatsonp01/
[Wed Aug 10 16:59:33 2016] [error] [client 172.26.70.126] (13)Permission denied: access to /nagiosxi/ denied, referer: http://lkendrwatsonp01/
[Wed Aug 10 17:07:22 2016] [error] [client 172.26.70.126] (13)Permission denied: access to /nagiosxi/ denied, referer: http://lkendrwatsonp01/
[Wed Aug 10 17:07:24 2016] [error] [client 172.26.70.126] (13)Permission denied: access to /nagiosxi/ denied, referer: http://lkendrwatsonp01/
[Wed Aug 10 17:07:25 2016] [error] [client 172.26.70.126] (13)Permission denied: access to /nagiosxi/ denied, referer: http://lkendrwatsonp01/
[Wed Aug 10 17:07:26 2016] [error] [client 172.26.70.126] (13)Permission denied: access to /nagiosxi/ denied, referer: http://lkendrwatsonp01/
[Wed Aug 10 17:07:28 2016] [error] [client 172.26.70.126] (13)Permission denied: access to /nagiosxi/ denied, referer: http://lkendrwatsonp01/
[Wed Aug 10 17:07:29 2016] [error] [client 172.26.70.126] (13)Permission denied: access to /nagiosxi/ denied, referer: http://lkendrwatsonp01/
[Wed Aug 10 17:07:31 2016] [error] [client 172.26.70.126] (13)Permission denied: access to /nagiosxi/ denied, referer: http://lkendrwatsonp01/
[Wed Aug 10 17:07:32 2016] [error] [client 172.26.70.126] (13)Permission denied: access to /nagiosxi/ denied, referer: http://lkendrwatsonp01/
[Wed Aug 10 17:11:16 2016] [notice] caught SIGTERM, shutting down
[Wed Aug 10 17:11:17 2016] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Wed Aug 10 17:11:17 2016] [notice] Digest: generating secret for digest authentication ...
[Wed Aug 10 17:11:17 2016] [notice] Digest: done
[Wed Aug 10 17:11:17 2016] [notice] Apache/2.2.15 (Unix) DAV/2 PHP/5.3.3 mod_ssl/2.2.15 OpenSSL/1.0.1e-fips configured -- resuming normal operations
[Wed Aug 10 17:11:22 2016] [error] [client 172.26.70.126] (13)Permission denied: access to /nagiosxi/ denied, referer: http://lkendrwatsonp01/
[Wed Aug 10 17:11:23 2016] [error] [client 172.26.70.126] (13)Permission denied: access to /nagiosxi/ denied, referer: http://lkendrwatsonp01/
[Wed Aug 10 17:11:28 2016] [error] [client 172.26.70.126] (13)Permission denied: access to /nagiosxi/ denied, referer: http://lkendrwatsonp01/
[Thu Aug 11 11:11:14 2016] [error] [client 172.26.70.118] PHP Warning:  date(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/New_York' for 'EDT/-4.0/DST' instead in /var/www/html/index.php on line 91
[Thu Aug 11 11:11:14 2016] [error] [client 172.26.70.118] PHP Warning:  date(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/New_York' for 'EDT/-4.0/DST' instead in /var/www/html/index.php on line 106
[Thu Aug 11 11:11:16 2016] [error] [client 172.26.70.118] (13)Permission denied: access to /nagiosxi/ denied, referer: http://lkendrwatsonp01/


as well as:

Code: Select all

[root@lkendrwatsonp01 ~]# tail -n10 /var/log/httpd/ssl_error_log
[Wed Aug 10 14:01:54 2016] [warn] RSA server certificate is a CA certificate (Ba                                                                                                                                                              sicConstraints: CA == TRUE !?)
[Wed Aug 10 14:01:54 2016] [warn] RSA server certificate is a CA certificate (Ba                                                                                                                                                              sicConstraints: CA == TRUE !?)
[Wed Aug 10 14:03:26 2016] [warn] RSA server certificate is a CA certificate (Ba                                                                                                                                                              sicConstraints: CA == TRUE !?)
[Wed Aug 10 14:03:26 2016] [warn] RSA server certificate is a CA certificate (Ba                                                                                                                                                              sicConstraints: CA == TRUE !?)
[Wed Aug 10 14:21:02 2016] [warn] RSA server certificate is a CA certificate (Ba                                                                                                                                                              sicConstraints: CA == TRUE !?)
[Wed Aug 10 14:21:02 2016] [warn] RSA server certificate is a CA certificate (Ba                                                                                                                                                              sicConstraints: CA == TRUE !?)
[Wed Aug 10 14:38:58 2016] [warn] RSA server certificate is a CA certificate (Ba                                                                                                                                                              sicConstraints: CA == TRUE !?)
[Wed Aug 10 14:38:59 2016] [warn] RSA server certificate is a CA certificate (Ba                                                                                                                                                              sicConstraints: CA == TRUE !?)
[Wed Aug 10 17:11:17 2016] [warn] RSA server certificate is a CA certificate (Ba                                                                                                                                                              sicConstraints: CA == TRUE !?)
[Wed Aug 10 17:11:17 2016] [warn] RSA server certificate is a CA certificate (Ba                                                                                                                                                              sicConstraints: CA == TRUE !?)
[root@lkendrwatsonp01 ~]#

Re: Forbidden You don't have permission to access /nagiosxi

Posted: Thu Aug 11, 2016 4:24 pm
by tmcdonald
Check out some of the items in this article:

https://www.petefreitag.com/item/793.cfm

Looks like either permissions on a directory, or Apache misconfig.

Re: Forbidden You don't have permission to access /nagiosxi

Posted: Thu Aug 11, 2016 4:27 pm
by rkennedy
Weird - did anything happen to trigger this? Was anything changed recently? Just trying to get a perspective what started the issue.

Can you post / PM your entire /etc/httpd/conf.d/ folder for us to look at?

Re: Forbidden You don't have permission to access /nagiosxi

Posted: Fri Aug 12, 2016 9:17 am
by benhank
somehow the permissions on the nagiosxi directory changed from 0755 to something else. im gonna try to do a restore and see if that fixes it

Re: Forbidden You don't have permission to access /nagiosxi

Posted: Fri Aug 12, 2016 11:20 am
by benhank
the restore fixed it. odd tho. but hey its running on a windows machine so what can yah say...

Re: Forbidden You don't have permission to access /nagiosxi

Posted: Fri Aug 12, 2016 1:55 pm
by rkennedy
Weird. Not sure what would have changed the permissions :|

@benhank - are we good to close this one up?

Re: Forbidden You don't have permission to access /nagiosxi

Posted: Fri Aug 12, 2016 2:01 pm
by benhank
yes sir!