Nagios Support Forum

Hi,

I added a website to my tools sections to have direct access to a tool we use for computer inventory. The tool http://glpi-project.org/spip.php?lang=en is a PHP apache/Mysql website running a different server. I get to the login page from tools section but after entering the credentials I get blank page and inspecting it with the browser it shows "Refuse to display in a frame because it set 'X-Frame-Options' to 'sameorigin'". In the Security tab of the System Settings I tried disabling "Frame Restrictions" and adding the host where the tool is installed to the Allowed Host list as well as adding "Header always unset X-Frame-Options" in .htaccess of the server where the tool is running but neither seems to work.

Any idea how to make this works? Right now both my Nagios and the tool use HTTP

monit_burb wrote:In the Security tab of the System Settings I tried disabling "Frame Restrictions" and adding the host where the tool is installed to the Allowed Host list as well as adding "Header always unset X-Frame-Options" in .htaccess of the server where the tool is running but neither seems to work.

My only thought would be that the application itself, not necessarily Apache or Nagios XI, may be setting the headers for that application after login.

Typically, Header unset X-Frame-Options is sufficient. Are you certain there are no Apache configurations for your application that are overwriting this setting?

Did @mcapra's post help you? Please let us know if you have any additional questions.