Nagios Support Forum

Running './C-cronjobs'...
You (apache) are not allowed to access to (crontab) because of pam configuration.
RESULT=1

lmiltchev wrote:What is the output of the following commands?

Code: Select all

getenforce
umask
grep apache /etc/shadow

[svcazenoss@monprodrkn02 ~]$ getenforce; umask ; sudo grep apache /etc/shadow
Disabled
0022
[svcazenoss@monprodrkn02 ~]$

Will I have to do the same thing with apache?

Important: Nagios Enterprises highly recommends and will only support installing Nagios XI on a newly installed, "clean" system. Attempting to install Nagios XI on a pre-existing system with other applications already installed can cause the Nagios XI installation process to fail, critical system components and settings (e.g. database servers) to be modified in a way that negatively affects other applications, and previously installed applications to be automatically upgraded or removed. While installing XI on a system with other applications is possible, it is not recommended due to the possible interactions and complexity of multiple components that are required for Nagios XI to function. If you choose to ignore these warnings, you do so at your own risk.

What can I do to get past this?

lmiltchev wrote:Most probably, but I would like to point out that you are NOT installing Nagios XI on a "clean" system. Installing XI on heavily customized systems is out of scope for Nagios support. We can try to help but we cannot guarantee that your Nagios XI will install (or function after it's been installed) correctly.

bheden wrote:If you have any suggestions, or if you get it working, I'd love some feedback in regards to how.

#!/usr/bin/env bash
readonly bzero=$(basename $0 .sh)
readonly now=$(date '+%Y%m%d.%H%M%S')
readonly fname=/tmp/$bzero.$now.txt

readonly usr=${1-nagios}
readonly grp=${2-nagios}

date 1>$fname 2>&1
rcode=$(sudo chown $usr $fname 2>/dev/null || echo "nada")
if [[ "Z$rcode" == "Znada" ]] ; then
    echo "$bzero -- user $usr error"
    sudo rm -f $fname
    exit 1
    fi

rcode=$(sudo chgrp $grp $fname 2>/dev/null || echo "nada")
if [[ "Z$rcode" == "Znada" ]] ; then
    echo "$bzero -- group $usr error"
    sudo rm -f $fname
    exit 2
    fi

echo "$bzero -- ${usr}:${grp} appear to be okay"
sudo rm -f $fname
exit 0

$ for a in nagios goober ; do for b in nagios goober ; do ./checkuser.sh $a $b ; echo $? ; done ; done
checkuser -- nagios:nagios appear to be okay
0
checkuser -- group nagios error
2
checkuser -- user goober error
1
checkuser -- user goober error
1

dcrites wrote:

bheden wrote:If you have any suggestions, or if you get it working, I'd love some feedback in regards to how.

First suggestion: change how you look for a user/group. Right now you grep /etc/passwd and /etc/group. Try this on for size:

Code: Select all

#!/usr/bin/env bash
readonly bzero=$(basename $0 .sh)
readonly now=$(date '+%Y%m%d.%H%M%S')
readonly fname=/tmp/$bzero.$now.txt

readonly usr=${1-nagios}
readonly grp=${2-nagios}

date 1>$fname 2>&1
rcode=$(sudo chown $usr $fname 2>/dev/null || echo "nada")
if [[ "Z$rcode" == "Znada" ]] ; then
    echo "$bzero -- user $usr error"
    sudo rm -f $fname
    exit 1
    fi

rcode=$(sudo chgrp $grp $fname 2>/dev/null || echo "nada")
if [[ "Z$rcode" == "Znada" ]] ; then
    echo "$bzero -- group $usr error"
    sudo rm -f $fname
    exit 2
    fi

echo "$bzero -- ${usr}:${grp} appear to be okay"
sudo rm -f $fname
exit 0

It doesn't matter if the user or group are local, AD, LDAP, or whatever -- if they are "live" on that system, this will work.

Here is how I tested it:

$ for a in nagios goober ; do for b in nagios goober ; do ./checkuser.sh $a $b ; echo $? ; done ; done
checkuser -- nagios:nagios appear to be okay
0
checkuser -- group nagios error
2
checkuser -- user goober error
1
checkuser -- user goober error
1