Page 1 of 1

Nagios XI admin using check_by_ssh defect found!

Posted: Tue Aug 29, 2017 9:21 am
by ikekim
I've done extensive testing and discovered a defect with the Nagios XI Administration GUI where Service Detail Page is not correctly updating the monitoring status using "check_by_ssh".

From CCM I execute successfully to verify that my check_by_ssh root disk service is working and it does work! This is the command:
[[email protected] ~]$ /usr/local/nagios/libexec/check_by_ssh -H 49.27.72.116 -C "/usr/local/nagios/libexec/check_disk /" -l ikekim
DISK OK - free space: / 4915 MB (77.59% inode=98%);| /=1418MB;;;0;6334

Then from my admin GUI under "Service Status Detail" for "Root Disk Space" I click "Force an immediate check" and I get a "Command processed successfully", so this verifies that the above command is executing correctly.

However, my main status message stays on as "Remote command execution failed: Permission denied, please try again." This message contradicts the actual result of the commands an dthis is where the defect is.

I have uploaded the screenshots of 2 images; one shows command is successful and the other is incorrect message showing.

Let me know if anyone thinks my conclusion is incorrect.

thanks
ik

Re: Nagios XI admin using check_by_ssh defect found!

Posted: Tue Aug 29, 2017 10:13 am
by dwhitfield
We'd need to see how you have your service, hosts, and commands set up. Probably the simplest way to get the necessary info to us is to PM a profile. You can download it by going to Admin > System Config > System Profile and click the ***Download Profile*** button towards the top. If for whatever reason you *cannot* download the profile, please put the output of View System Info (5.3.4+, Show Profile if older) in the thread (that will at least get us some info). This will give us access to many of the logs we would otherwise ask for individually. If security is a concern, you can unzip the profile take out what you like, and then zip it up again. We may end up needing something you remove, but we can ask for that specifically.

You can also generate a profile manually using the script at /usr/local/nagiosxi/html/includes/components/profile/getprofile.sh

That should generate a profile in /usr/local/nagiosxi/var/components/ which you can get off the server with an application such as FileZilla.

After you PM the profile, please update this thread. Updating this thread is the only way for it to show back up on our dashboard.