NagVis - Problems with session expiration

[ssoliveira]

I created a dashboard in NagVis to display on my company's televisions.

After some time; the dashboard returns to the authentication screen (probably because the session has expired)

I performed tests creating a read-only account; and also using "Automatic Login"; but it’s still expired.

Is it possible to make dasboards accessible anonymously?

Or yet; pass some parameter in the url so that it is not necessary to authenticate?

https://my-xi/nagvis/frontend/nagvis-js ... TEST&xxxxx

[benjaminsmith]

Hello @ssoliveira

I would try increasing the Timeout Settings go to Admin --> Security --> Session Timeout. Set this to 0 for unlimited.

session.png

The other option is to try to use the Insecure Logins option, go to Admin --> Backward Integration --> Backend Login Settings

A few helpful posts on settings this up:
https://support.nagios.com/forum/viewto ... 16&t=54045
https://support.nagios.com/forum/viewto ... =6&t=32908

[ssoliveira]

Hi Benjamin,

In the current Nagios version; the location is different "
" Admin> System Config> Backward Compatibility> Allow Insecure Logins "

I enabled the option "Enable insecure login for this user"; and generated a ticket on the desired user (nagiosreader) by clicking on "Generate new insecure ticket".

After; I performed a test accessing the main page with the user and ticket; and it worked.

Code: Select all

OK
https://omitted/nagiosxi/?username=nagiosreader&ticket=omitted

However; I can't access the dashboards with the ticket; the url returns the authentication page.

NON OK
https://omitted/nagvis/frontend/nagvis-js/index.php?mod=Map&act=view&show=100_PRINCIPAL&username=nagiosreader&ticket=omitted

[benjaminsmith]

Hi @ssoliveira,

NagVis is an open-source project application that is merged into Nagios XI in an iframe. After doing some testing on my end, it looks you cannot directly go the NagVis page using the backend tickets.

As a workaround you can log in using the backend tickets:

Code: Select all

http://192.168.0.232/nagiosxi/index.php?username=nagiosadmin&ticket=123

and then view the NagvVis page

Code: Select all

http://192.168.0.232/nagiosxi/index.php?username=nagiosadmin&ticket=123

[ssoliveira]

Hi Benjamin,

There is some possibility that I can access a url inside nagios by passing the user and ticket parameters; + a parameter containing the desired url? so that after access it redirects the desired url;

Similar to what happens when we access a url without being authenticated; and after authenticating; it redirects the desired page.

[benjaminsmith]

Hi @ssoliveira,

When you say inside Nagios, you are referring to specific map pages withing NagVis, is this correct?

Other than the workaround of authenticating and then going to the desired page, this may need an enhancement submitted as the Nagvis pages are handled differently.

I performed tests creating a read-only account, and also using "Automatic Login"; but it’s still expired.

When you increased the session timeout settings, are you still getting a session expired for the auto-login.

[ssoliveira]

Hi Benjamin,

Yes; the pages we are displaying on the televisions in the NoC rooms are NagVis maps; The computers that display the information on televisions are located in places that are difficult to access; So; when the best solution would be to have a way of passing some token that allows access to the maps without authentication.

[benjaminsmith]

Hi @ssoliveira,

One more option, and not sure if this works for your environment or not, but you can add the NagVis map to a View, and display the Views in the NOC room.

https://assets.nagios.com/downloads/nag ... -Views.pdf