Page 1 of 3
Users unable to see hosts, no CGs visible in server wizard
Posted: Tue Sep 05, 2017 11:58 am
by jalfaro
Hoping someone can help me figure out what I've done wrong - I tried to follow the documentation for setting up Nagios XI w/ Mod Gearman and multi-tenancy. I've imported some LDAP users, and I can login as one of the LDAP users. I can also configure hosts using the wizards, but on step 4 when setting up the notifications, no contact records or contact groups appear in the panels even though I know there are 4 users and 2 contact groups. I can finish out the wizard and the host appears to get added if I login with the nagios admin account, but will not show up for the LDAP user that created the host entry. Please help!
Re: Users unable to see hosts, no CGs visible in server wiza
Posted: Tue Sep 05, 2017 1:34 pm
by dwhitfield
What is the output of sestatus? Can you attach your /etc/sudoers?
I assume so, since you say you can complete the wizard, but are you able to apply a configuration? What happens if you run the wizard as nagiosadmin? Is the user you are running the wizard as an admin?
Can you PM me your Profile? You can download it by going to Admin > System Config > System Profile and click the ***Download Profile*** button towards the top. If for whatever reason you *cannot* download the profile, please put the output of View System Info (5.3.4+, Show Profile if older) in the thread (that will at least get us some info). This will give us access to many of the logs we would otherwise ask for individually. If security is a concern, you can unzip the profile take out what you like, and then zip it up again. We may end up needing something you remove, but we can ask for that specifically.
You can also generate a profile manually using the script at /usr/local/nagiosxi/html/includes/components/profile/getprofile.sh
That should generate a profile in /usr/local/nagiosxi/var/components/ which you can get off the server with an application such as FileZilla.
After you PM the profile, please update this thread. Updating this thread is the only way for it to show back up on our dashboard.
UPDATE: Profile received and shared with techs.
Re: Users unable to see hosts, no CGs visible in server wiza
Posted: Tue Sep 05, 2017 1:50 pm
by jalfaro
I have PM'd you the profile.zip file, here is the sestatus and sudoers output:
Code: Select all
[root@wdc1xit01 pdevin]# sestatus
SELinux status: disabled
Defaults !visiblepw
Defaults always_set_home
Defaults env_reset
Defaults env_keep = "COLORS DISPLAY HOSTNAME HISTSIZE INPUTRC KDEDIR LS_COLORS"
Defaults env_keep += "MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE"
Defaults env_keep += "LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES"
Defaults env_keep += "LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE"
Defaults env_keep += "LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY"
Defaults secure_path = /usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
root ALL=(ALL) ALL
User_Alias NAGIOSXI=nagios
User_Alias NAGIOSXIWEB=apache
NAGIOSXI ALL = NOPASSWD:/etc/init.d/nagios start
NAGIOSXI ALL = NOPASSWD:/etc/init.d/nagios stop
NAGIOSXI ALL = NOPASSWD:/etc/init.d/nagios restart
NAGIOSXI ALL = NOPASSWD:/etc/init.d/nagios reload
NAGIOSXI ALL = NOPASSWD:/etc/init.d/nagios status
NAGIOSXI ALL = NOPASSWD:/etc/init.d/nagios checkconfig
NAGIOSXI ALL = NOPASSWD:/etc/init.d/ndo2db start
NAGIOSXI ALL = NOPASSWD:/etc/init.d/ndo2db stop
NAGIOSXI ALL = NOPASSWD:/etc/init.d/ndo2db restart
NAGIOSXI ALL = NOPASSWD:/etc/init.d/ndo2db reload
NAGIOSXI ALL = NOPASSWD:/etc/init.d/ndo2db status
NAGIOSXI ALL = NOPASSWD:/etc/init.d/npcd start
NAGIOSXI ALL = NOPASSWD:/etc/init.d/npcd stop
NAGIOSXI ALL = NOPASSWD:/etc/init.d/npcd restart
NAGIOSXI ALL = NOPASSWD:/etc/init.d/npcd reload
NAGIOSXI ALL = NOPASSWD:/etc/init.d/npcd status
NAGIOSXI ALL = NOPASSWD:/usr/bin/php /usr/local/nagiosxi/html/includes/components/autodiscovery/scripts/autodiscover_new.php *
NAGIOSXI ALL = NOPASSWD:/usr/local/nagiosxi/html/includes/components/profile/getprofile.sh
NAGIOSXI ALL = NOPASSWD:/usr/local/nagiosxi/scripts/upgrade_to_latest.sh
NAGIOSXI ALL = NOPASSWD:/usr/local/nagiosxi/scripts/change_timezone.sh
NAGIOSXI ALL = NOPASSWD:/usr/local/nagiosxi/scripts/manage_services.sh *
NAGIOSXI ALL = NOPASSWD:/usr/local/nagiosxi/scripts/reset_config_perms.sh
NAGIOSXI ALL = NOPASSWD:/usr/local/nagiosxi/scripts/backup_xi.sh *
NAGIOSXIWEB ALL = NOPASSWD:/usr/bin/tail -100 /var/log/messages
NAGIOSXIWEB ALL = NOPASSWD:/usr/bin/tail -100 /var/log/httpd/error_log
NAGIOSXIWEB ALL = NOPASSWD:/usr/bin/tail -100 /var/log/mysqld.log
NAGIOSXIWEB ALL = NOPASSWD:/usr/bin/php /usr/local/nagiosxi/html/includes/components/autodiscovery/scripts/autodiscover_new.php *
NAGIOSXIWEB ALL = NOPASSWD:/usr/local/nagiosxi/html/includes/components/profile/getprofile.sh
NAGIOSXIWEB ALL = NOPASSWD:/etc/init.d/snmptt restart
NAGIOSXIWEB ALL = NOPASSWD:/usr/local/nagiosxi/scripts/repair_databases.sh
NAGIOSXIWEB ALL = NOPASSWD:/usr/local/nagiosxi/scripts/manage_services.sh *
Re: Users unable to see hosts, no CGs visible in server wiza
Posted: Tue Sep 05, 2017 4:36 pm
by dwhitfield
The account you used to set up the one host you added, is it set up as an admin in the UI? What happens if you run the wizard with the nagiosamin account? From looking at your profile, it looks like you are able to apply the configuration.
Could you send a screenshot of what you are seeing? It seems pretty clear from your description, but something isn't adding up.
Also, it seems strange that you only have 2 hosts, but have had the server up since at least August 14th. Is that correct that you only have one (maybe two) hosts (I can explain the inconsistency if you like, but it seems superfluous at the moment).
Re: Users unable to see hosts, no CGs visible in server wiza
Posted: Tue Sep 05, 2017 5:26 pm
by jalfaro
The account I'm using to add hosts is NOT an admin - but I didn't think it should have to be? The idea is for users in different departments to be able to add their own hosts to Nagios XI and then only have visibility for those hosts added by them or some other member of their team (within the same contact group.) The screenshots attached show the host, service, and contact group panels blank despite there being some configured. I'll add the final screenshot on a subsequent reply since I'm limited to 3.
The fact there are only 2 hosts configured on this XI server is expected - I've been working on getting everything setup and this is a soon-to-be production environment but no production hosts have been added for monitoring as yet.
Re: Users unable to see hosts, no CGs visible in server wiza
Posted: Tue Sep 05, 2017 5:27 pm
by jalfaro
Here is the final screenshot showing the result when clicking on the "View status details for 10.60.84.17" link from the end of the host add wizard.
Re: Users unable to see hosts, no CGs visible in server wiza
Posted: Wed Sep 06, 2017 9:49 am
by jalfaro
Is there anything else I can provide from the server side?
Please Advise.
Re: Users unable to see hosts, no CGs visible in server wiza
Posted: Wed Sep 06, 2017 1:36 pm
by dwhitfield
This is normal if the contact is not in a contact group. In order to be able to add all users and contact groups you will need to check the top three boxes under user permissions (the ones under the user vs. admin drop-down).
Re: Users unable to see hosts, no CGs visible in server wiza
Posted: Wed Sep 06, 2017 1:42 pm
by jalfaro
dwhitfield wrote:This is normal if the contact is not in a contact group. In order to be able to add all users and contact groups you will need to check the top three boxes under user permissions (the ones under the user vs. admin drop-down).
The user 'jalfaro' which I used to add the host, IS in a contact group - "GlobalSolutions"
My understanding is that because the user is in the contact group, I should be able to add that contact group to the host I'm adding, is that incorrect?
Re: Users unable to see hosts, no CGs visible in server wiza
Posted: Wed Sep 06, 2017 1:44 pm
by jalfaro
See attached images.