Page 1 of 1
NagVis - Problems with session expiration
Posted: Fri Jan 24, 2020 4:43 pm
by ssoliveira
I created a dashboard in NagVis to display on my company's televisions.
After some time; the dashboard returns to the authentication screen (probably because the session has expired)
I performed tests creating a read-only account; and also using "Automatic Login"; but it’s still expired.
Is it possible to make dasboards accessible anonymously?
Or yet; pass some parameter in the url so that it is not necessary to authenticate?
https://my-xi/nagvis/frontend/nagvis-js ... TEST&xxxxx
Re: NagVis - Problems with session expiration
Posted: Mon Jan 27, 2020 11:44 am
by benjaminsmith
Hello
@ssoliveira
I would try increasing the Timeout Settings go to Admin --> Security --> Session Timeout. Set this to 0 for unlimited.
session.png
The other option is to try to use the Insecure Logins option, go to Admin --> Backward Integration --> Backend Login Settings
A few helpful posts on settings this up:
https://support.nagios.com/forum/viewto ... 16&t=54045
https://support.nagios.com/forum/viewto ... =6&t=32908
Re: NagVis - Problems with session expiration
Posted: Wed Jan 29, 2020 12:48 pm
by ssoliveira
Hi Benjamin,
In the current Nagios version; the location is different "
" Admin> System Config> Backward Compatibility> Allow Insecure Logins "
I enabled the option "Enable insecure login for this user"; and generated a ticket on the desired user (nagiosreader) by clicking on "Generate new insecure ticket".
After; I performed a test accessing the main page with the user and ticket; and it worked.
Code: Select all
OK
https://omitted/nagiosxi/?username=nagiosreader&ticket=omitted
However; I can't access the dashboards with the ticket; the url returns the authentication page.
NON OK
https://omitted/nagvis/frontend/nagvis-js/index.php?mod=Map&act=view&show=100_PRINCIPAL&username=nagiosreader&ticket=omitted
Re: NagVis - Problems with session expiration
Posted: Wed Jan 29, 2020 3:02 pm
by benjaminsmith
Hi
@ssoliveira,
NagVis is an open-source project application that is merged into Nagios XI in an iframe. After doing some testing on my end, it looks you cannot directly go the NagVis page using the backend tickets.
As a workaround you can log in using the backend tickets:
Code: Select all
http://192.168.0.232/nagiosxi/index.php?username=nagiosadmin&ticket=123
and then view the NagvVis page
Code: Select all
http://192.168.0.232/nagiosxi/index.php?username=nagiosadmin&ticket=123
Re: NagVis - Problems with session expiration
Posted: Wed Jan 29, 2020 3:53 pm
by ssoliveira
Hi Benjamin,
There is some possibility that I can access a url inside nagios by passing the user and ticket parameters; + a parameter containing the desired url? so that after access it redirects the desired url;
Similar to what happens when we access a url without being authenticated; and after authenticating; it redirects the desired page.
Re: NagVis - Problems with session expiration
Posted: Wed Jan 29, 2020 5:59 pm
by benjaminsmith
Hi
@ssoliveira,
When you say inside Nagios, you are referring to specific map pages withing NagVis, is this correct?
Other than the workaround of authenticating and then going to the desired page, this may need an enhancement submitted as the Nagvis pages are handled differently.
I performed tests creating a read-only account, and also using "Automatic Login"; but it’s still expired.
When you increased the session timeout settings, are you still getting a session expired for the auto-login.
Re: NagVis - Problems with session expiration
Posted: Thu Jan 30, 2020 9:36 am
by ssoliveira
Hi Benjamin,
Yes; the pages we are displaying on the televisions in the NoC rooms are NagVis maps; The computers that display the information on televisions are located in places that are difficult to access; So; when the best solution would be to have a way of passing some token that allows access to the maps without authentication.
Re: NagVis - Problems with session expiration
Posted: Thu Jan 30, 2020 2:12 pm
by benjaminsmith
Hi
@ssoliveira,
One more option, and not sure if this works for your environment or not, but you can add the NagVis map to a View, and display the Views in the NOC room.
https://assets.nagios.com/downloads/nag ... -Views.pdf