NRDP receiving 403 Forbidden

jeffdonovan · Post by **jeffdonovan** » Thu Apr 26, 2018 2:39 pm

The NRDP passive agents are receiving 403 Forbidden in the NRDP_Debug log after a recent upgrade/patch cycle. I attempted the /usr/local/nagiosxi/scripts/reset_config_perms.sh and rebooted the server to no avail. SELINUX is disabled. I can provide the /usr/local/nagiosxi/var/xi-sys.cfg in whatever form requested as recommended https://support.nagios.com/kb/article/n ... s-601.html

Thank you

npolovenko · Post by **npolovenko** » Thu Apr 26, 2018 3:21 pm

Hello, @jeffdonovan.
Are you still able to acess the nrdp page from a web browser?

Code: Select all

http://192.168.4.172/nrdp/

*Replace my IP address with yours.

Also, try to update the authentication token:
https://assets.nagios.com/downloads/nag ... ith_XI.pdf

jeffdonovan · Post by **jeffdonovan** » Thu Apr 26, 2018 4:10 pm

Attempted from both localhost and and from dektop and same error
[[root@xczzda0335 ~]# wget http://localhost/nrdp
--2018-04-26 14:05:07-- http://localhost/nrdp
Resolving localhost (localhost)... 127.0.0.1, ::1
Connecting to localhost (localhost)|127.0.0.1|:80... connected.
HTTP request sent, awaiting response... 403 Forbidden
2018-04-26 14:05:07 ERROR 403: Forbidden.

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>403 Forbidden</title>
</head><body>
<h1>Forbidden</h1>
<p>You don't have permission to access /nrdp
on this server.</p>
</body></html>

We are getting past the local firewall and https is responding. the admin interface is working as well. However permissions to /nrdp are still

nrdp client error
4/26/2018 2:06:57 PM address..... : https://xczzda0335/nrdp//?token=W914069 ... OD762&cmd=
4/26/2018 2:06:57 PM post response from NRDP : <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>403 Forbidden</title>
</head><body>
<h1>Forbidden</h1>
<p>You don't have permission to access /nrdp//
on this server.</p>
</body></html>

4/26/2018 2:06:57 PM ---NRDS Transaction Finished--- :

npolovenko · Post by **npolovenko** » Thu Apr 26, 2018 4:33 pm

@jeffdonovan, Can you post the output of the nrdp.conf file?

Code: Select all

[root@nikxi tmp]# cat /etc/httpd/conf.d/nrdp.conf
<Directory "/usr/local/nrdp">
#  SSLRequireSSL
   Options None
   AllowOverride None
   Order allow,deny
   Allow from all
#  Order deny,allow
#  Deny from all
#  Allow from 127.0.0.1
#   AuthName "NRDP"
#   AuthType Basic
#   AuthUserFile /usr/local/nrdp/htpasswd.users
#  Require valid-user
   Require all granted
</Directory>

Alias /nrdp "/usr/local/nrdp/server"

jeffdonovan · Post by **jeffdonovan** » Mon Apr 30, 2018 12:45 pm

you were right it was the
" Require all granted"
line that was missing from the config file. Thank you for your assistance.

npolovenko · Post by **npolovenko** » Mon Apr 30, 2018 4:32 pm

@jeffdonovan, Great! Let me know if it's ok to lock this thread now?

Nagios Support Forum

NRDP receiving 403 Forbidden

NRDP receiving 403 Forbidden

Re: NRDP receiving 403 Forbidden

Re: NRDP receiving 403 Forbidden

Re: NRDP receiving 403 Forbidden

Re: NRDP receiving 403 Forbidden

Re: NRDP receiving 403 Forbidden