Page 1 of 1
Unable to remove acknowledgment comments
Posted: Tue Apr 24, 2018 1:27 am
by atsb
Hello!
About nagios XI environment
1) Linux Distribution and version?
Centos7
2) 32 or 64bit?
64bit
3) VMware Image or Manual Install of XI?
Manual install
4) Are there special configurations on your system, ie; is Gnome installed? Are you using a proxy? Are you using SSL?
SSL
About the problem:
Normal users are able to acknowledge cirtical state services that they are assign to but after doing so they are unable to remove comments. Trying to remove comment throws error "Command could not be processed" and this goes only for normal users, administrators are able to remove comments. This seems to have happen after upgrading from 5.4.12 to 5.4.13. Pictures are provided below. Hopefully someone can help in this matter.
acknowledgment.JPG
acknowledgment2.JPG
error.jpg
Thank you!
Re: Unable to remove acknowledgment comments
Posted: Tue Apr 24, 2018 12:57 pm
by cdienger
I haven't been able to reproduce this problem unfortunately. What are the permissions set to on the user? Also, when the user goes to delete an acknolwedgement, run:
tail -f /usr/local/nagiosxi/var/cmdsubsys.log
You should see cmd 16 and 4 run:
PROCESS COMMAND: CMD=16, DATA=a:2:{s:3:"cmd";i:4;s:10:"comment_id";i:295;}
COMMAND DATA: a:2:{s:3:"cmd";i:4;s:10:"comment_id";i:295;}
CMDARR:
Array
(
[cmd] => 4
[comment_id] => 295
)
CORE CMD: DEL_SVC_COMMENT;295
SUBMITTING A NAGIOSCORE COMMAND...
Let us know if you don't see this or if you see anything else logged.
Re: Unable to remove acknowledgment comments
Posted: Wed Apr 25, 2018 1:42 am
by atsb
Hello!
Running "tail -f /usr/local/nagiosxi/var/cmdsubsys.log" while doing everything from step1 to step3, does not give me same output as you post. Actually it says only "PROCESSED 0 COMMANDS"
Code: Select all
tail -f /usr/local/nagiosxi/var/cmdsubsys.log
PROCESSED 0 COMMANDS
............................................................
PROCESSED 0 COMMANDS
...................................................
This user has only "Can see all objects" permission and then is assigned to host as contact.
Re: Unable to remove acknowledgment comments
Posted: Wed Apr 25, 2018 1:40 pm
by cdienger
The backend commands needed to delete the acknowledgement need the "Can see/control monitoring engine" option enabled on the account as well. Please test this and let me know your results.
Re: Unable to remove acknowledgment comments
Posted: Thu Apr 26, 2018 1:40 am
by atsb
Yes, it works like this but according to the manual:
The user can see and control (e.g. shutdown or restart) the
monitoring engine. Not recommended unless the user is advanced.
This permission is also required if creating a user to be used with the
Nagios XI Server monitoring wizard.
This gives them way too many unnecessary permissions. Is there any way around this ?
Re: Unable to remove acknowledgment comments
Posted: Thu Apr 26, 2018 11:09 am
by lmiltchev
This gives them way too many unnecessary permissions. Is there any way around this ?
Not at the moment, however in Nagios XI 6, there will be more granular/better-defined permissions.
https://www.nagios.com/roadmaps/