XDELETE API is not working getting permission error

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
Locked
prashant.v01
Posts: 15
Joined: Tue Jun 23, 2020 7:12 am

XDELETE API is not working getting permission error

Post by prashant.v01 »

Hi All,

Trying to delete host using API functionality but getting "You don't have permission to access /nagiosxi/api/v1/config/host" error while executing below Xdelete API command.
Have write access on API & able to run -XGET & -XPOST command

curl -XDELETE "https://XXXXXXXXX.net/nagiosxi/api/v1/c ... pikey=aVdG(API Key)&pretty=1&host_name=testapihost"
Last edited by prashant.v01 on Wed Aug 11, 2021 4:49 am, edited 1 time in total.
Top
User avatar
pbroste
Posts: 1288
Joined: Tue Jun 01, 2021 1:27 pm

Re: XDELETE API is not working getting permission error

Post by pbroste »

Hello prashant.v01,

Thanks for reaching out, appears that you are able to run other curl commands without permission issues.

We want to see what you are receiving on the curl command that you are running by including some verbose (--verbose) info.

Example:

Code: Select all

curl -XDELETE "https://XXXXXXXXX.net/nagiosxi/api/v1/config/host?apikey=aVdGO7kfGOg4rA4YLFNXGHLkpc4hoi9aqQHMsHnAlOA3Nh&pretty=1&host_name=testapihost" --verbose
Take it that you are able to delete host via the web console in; ccm > hosts > X "to delete"? Please check the output from your browser Developement Tools > Network to see if things match the API. Should see something like this:
submitted: true
cmd: delete
type: host
id: 52
objectName: sometesthost
mode: insert
returnUrl: index.php?cmd=view&type=host&page=1
token: 783672be8ea6e24d7c0d35961f03b984
orderby:
sort: ASC
typeName: host_name
Please follow up with the results so we can help figure things out.

Thanks,
Perry
Top
prashant.v01
Posts: 15
Joined: Tue Jun 23, 2020 7:12 am

Re: XDELETE API is not working getting permission error

Post by prashant.v01 »

verbose details screenshot added
You do not have the required permissions to view the files attached to this post.
Top
User avatar
pbroste
Posts: 1288
Joined: Tue Jun 01, 2021 1:27 pm

Re: XDELETE API is not working getting permission error

Post by pbroste »

Hello @prashant.v01,

Thanks for sending along the details in the screenshot.

Do you receive a list when running a GET command on this?

Code: Select all

curl -XGET "https://XXXXXXXXX.net/nagiosxi/api/v1/config/host?apikey=aVdGO7kfGOg4rA4YLFNXGHLkpc4hoi9aqQHMsHnAlOA3Nh&pretty=1&host_name=testapihost"
or a list:

Code: Select all

curl -XGET "https://XXXXXXXXX.net/nagiosxi/api/v1/config/host?apikey=aVdGO7kfGOg4rA4YLFNXGHLkpc4hoi9aqQHMsHnAlOA3Nh&pretty=1&host_name"
Let's also grab the httpd error and access log from the '/var/log/httpd/error.log' and '/var/log/httpd/access.log'

Code: Select all

tar -czf ~/backup-archive.tar.gz  /var/log/httpd/access_log /var/log/httpd/error_log
or

Code: Select all

tail -50 /var/log/httpd/access_log

Code: Select all

tail -50 /var/log/httpd/error_log
Thanks,
Perry
Top
prashant.v01
Posts: 15
Joined: Tue Jun 23, 2020 7:12 am

Re: XDELETE API is not working getting permission error

Post by prashant.v01 »

Hello Perry,

Sorry for late reply...

Please find the below log details:

Access_log :

127.0.0.1 - - [09/Aug/2021:05:12:17 -0500] "OPTIONS * HTTP/1.0" 200 - "-" "Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_wsgi/3.4 Python/2.7.5 PHP/7.2.22 (internal dummy connection)"
127.0.0.1 - - [09/Aug/2021:05:12:19 -0500] "GET / HTTP/1.0" 302 193 "-" "check_http/v2.2.1 (nagios-plugins 2.2.1)"
127.0.0.1 - - [09/Aug/2021:05:12:25 -0500] "GET /server-status HTTP/1.1" 200 17571 "-" "Wget/1.14 (linux-gnu)"
127.0.0.1 - - [09/Aug/2021:05:12:28 -0500] "OPTIONS * HTTP/1.0" 200 - "-" "Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_wsgi/3.4 Python/2.7.5 PHP/7.2.22 (internal dummy connection)"
127.0.0.1 - - [09/Aug/2021:05:12:45 -0500] "GET /server-status HTTP/1.1" 200 17571 "-" "Wget/1.14 (linux-gnu)"
127.0.0.1 - - [09/Aug/2021:05:12:47 -0500] "OPTIONS * HTTP/1.0" 200 - "-" "Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_wsgi/3.4 Python/2.7.5 PHP/7.2.22 (internal dummy connection)"
127.0.0.1 - - [09/Aug/2021:05:13:05 -0500] "GET /server-status HTTP/1.1" 200 17571 "-" "Wget/1.14 (linux-gnu)"
127.0.0.1 - - [09/Aug/2021:05:13:09 -0500] "OPTIONS * HTTP/1.0" 200 - "-" "Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_wsgi/3.4 Python/2.7.5 PHP/7.2.22 (internal dummy connection)"
16.229.27.238 - - [09/Aug/2021:05:13:20 -0500] "GET / HTTP/1.1" 302 206 "-" "check_http/v2.2.1 (nagios-plugins 2.2.1)"
127.0.0.1 - - [09/Aug/2021:05:13:25 -0500] "GET /server-status HTTP/1.1" 200 17571 "-" "Wget/1.14 (linux-gnu)"
127.0.0.1 - - [09/Aug/2021:05:13:45 -0500] "GET /server-status HTTP/1.1" 200 17571 "-" "Wget/1.14 (linux-gnu)"
127.0.0.1 - - [09/Aug/2021:05:14:05 -0500] "GET /server-status HTTP/1.1" 200 17571 "-" "Wget/1.14 (linux-gnu)"
127.0.0.1 - - [09/Aug/2021:05:14:25 -0500] "GET /server-status HTTP/1.1" 200 17571 "-" "Wget/1.14 (linux-gnu)"
127.0.0.1 - - [09/Aug/2021:05:14:45 -0500] "GET /server-status HTTP/1.1" 200 17571 "-" "Wget/1.14 (linux-gnu)"
127.0.0.1 - - [09/Aug/2021:05:14:49 -0500] "OPTIONS * HTTP/1.0" 200 - "-" "Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_wsgi/3.4 Python/2.7.5 PHP/7.2.22 (internal dummy connection)"
127.0.0.1 - - [09/Aug/2021:05:14:56 -0500] "OPTIONS * HTTP/1.0" 200 - "-" "Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_wsgi/3.4 Python/2.7.5 PHP/7.2.22 (internal dummy connection)"
127.0.0.1 - - [09/Aug/2021:05:15:02 -0500] "OPTIONS * HTTP/1.0" 200 - "-" "Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_wsgi/3.4 Python/2.7.5 PHP/7.2.22 (internal dummy connection)"
127.0.0.1 - - [09/Aug/2021:05:15:05 -0500] "GET /server-status HTTP/1.1" 200 17571 "-" "Wget/1.14 (linux-gnu)"
127.0.0.1 - - [09/Aug/2021:05:15:25 -0500] "GET /server-status HTTP/1.1" 200 17571 "-" "Wget/1.14 (linux-gnu)"
127.0.0.1 - - [09/Aug/2021:05:15:45 -0500] "GET /server-status HTTP/1.1" 200 17571 "-" "Wget/1.14 (linux-gnu)"
127.0.0.1 - - [09/Aug/2021:05:15:50 -0500] "OPTIONS * HTTP/1.0" 200 - "-" "Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_wsgi/3.4 Python/2.7.5 PHP/7.2.22 (internal dummy connection)"
127.0.0.1 - - [09/Aug/2021:05:15:58 -0500] "OPTIONS * HTTP/1.0" 200 - "-" "Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_wsgi/3.4 Python/2.7.5 PHP/7.2.22 (internal dummy connection)"
127.0.0.1 - - [09/Aug/2021:05:16:03 -0500] "OPTIONS * HTTP/1.0" 200 - "-" "Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_wsgi/3.4 Python/2.7.5 PHP/7.2.22 (internal dummy connection)"
127.0.0.1 - - [09/Aug/2021:05:16:06 -0500] "GET /server-status HTTP/1.1" 200 17571 "-" "Wget/1.14 (linux-gnu)"
127.0.0.1 - - [09/Aug/2021:05:16:26 -0500] "GET /server-status HTTP/1.1" 200 17571 "-" "Wget/1.14 (linux-gnu)"
127.0.0.1 - - [09/Aug/2021:05:16:46 -0500] "GET /server-status HTTP/1.1" 200 17571 "-" "Wget/1.14 (linux-gnu)"
127.0.0.1 - - [09/Aug/2021:05:16:47 -0500] "OPTIONS * HTTP/1.0" 200 - "-" "Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_wsgi/3.4 Python/2.7.5 PHP/7.2.22 (internal dummy connection)"
127.0.0.1 - - [09/Aug/2021:05:16:49 -0500] "OPTIONS * HTTP/1.0" 200 - "-" "Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_wsgi/3.4 Python/2.7.5 PHP/7.2.22 (internal dummy connection)"
127.0.0.1 - - [09/Aug/2021:05:16:58 -0500] "OPTIONS * HTTP/1.0" 200 - "-" "Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_wsgi/3.4 Python/2.7.5 PHP/7.2.22 (internal dummy connection)"
127.0.0.1 - - [09/Aug/2021:05:17:04 -0500] "OPTIONS * HTTP/1.0" 200 - "-" "Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_wsgi/3.4 Python/2.7.5 PHP/7.2.22 (internal dummy connection)"
127.0.0.1 - - [09/Aug/2021:05:17:06 -0500] "GET /server-status HTTP/1.1" 200 17571 "-" "Wget/1.14 (linux-gnu)"
127.0.0.1 - - [09/Aug/2021:05:17:14 -0500] "GET / HTTP/1.0" 302 193 "-" "check_http/v2.2.1 (nagios-plugins 2.2.1)"
127.0.0.1 - - [09/Aug/2021:05:17:26 -0500] "GET /server-status HTTP/1.1" 200 17571 "-" "Wget/1.14 (linux-gnu)"
127.0.0.1 - - [09/Aug/2021:05:17:46 -0500] "GET /server-status HTTP/1.1" 200 17571 "-" "Wget/1.14 (linux-gnu)"
127.0.0.1 - - [09/Aug/2021:05:17:47 -0500] "OPTIONS * HTTP/1.0" 200 - "-" "Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_wsgi/3.4 Python/2.7.5 PHP/7.2.22 (internal dummy connection)"
127.0.0.1 - - [09/Aug/2021:05:17:49 -0500] "OPTIONS * HTTP/1.0" 200 - "-" "Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_wsgi/3.4 Python/2.7.5 PHP/7.2.22 (internal dummy connection)"
127.0.0.1 - - [09/Aug/2021:05:18:06 -0500] "GET /server-status HTTP/1.1" 200 17571 "-" "Wget/1.14 (linux-gnu)"
16.229.27.238 - - [09/Aug/2021:05:18:19 -0500] "GET / HTTP/1.1" 302 206 "-" "check_http/v2.2.1 (nagios-plugins 2.2.1)"
127.0.0.1 - - [09/Aug/2021:05:18:26 -0500] "GET /server-status HTTP/1.1" 200 17571 "-" "Wget/1.14 (linux-gnu)"
127.0.0.1 - - [09/Aug/2021:05:18:46 -0500] "GET /server-status HTTP/1.1" 200 17571 "-" "Wget/1.14 (linux-gnu)"
127.0.0.1 - - [09/Aug/2021:05:18:50 -0500] "OPTIONS * HTTP/1.0" 200 - "-" "Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_wsgi/3.4 Python/2.7.5 PHP/7.2.22 (internal dummy connection)"
127.0.0.1 - - [09/Aug/2021:05:19:04 -0500] "OPTIONS * HTTP/1.0" 200 - "-" "Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_wsgi/3.4 Python/2.7.5 PHP/7.2.22 (internal dummy connection)"
127.0.0.1 - - [09/Aug/2021:05:19:06 -0500] "GET /server-status HTTP/1.1" 200 17571 "-" "Wget/1.14 (linux-gnu)"
127.0.0.1 - - [09/Aug/2021:05:19:26 -0500] "GET /server-status HTTP/1.1" 200 17571 "-" "Wget/1.14 (linux-gnu)"
127.0.0.1 - - [09/Aug/2021:05:19:46 -0500] "GET /server-status HTTP/1.1" 200 17571 "-" "Wget/1.14 (linux-gnu)"
127.0.0.1 - - [09/Aug/2021:05:20:06 -0500] "GET /server-status HTTP/1.1" 200 17571 "-" "Wget/1.14 (linux-gnu)"
127.0.0.1 - - [09/Aug/2021:05:20:17 -0500] "OPTIONS * HTTP/1.0" 200 - "-" "Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_wsgi/3.4 Python/2.7.5 PHP/7.2.22 (internal dummy connection)"
127.0.0.1 - - [09/Aug/2021:05:20:26 -0500] "GET /server-status HTTP/1.1" 200 17571 "-" "Wget/1.14 (linux-gnu)"
127.0.0.1 - - [09/Aug/2021:05:20:46 -0500] "GET /server-status HTTP/1.1" 200 17571 "-" "Wget/1.14 (linux-gnu)"
127.0.0.1 - - [09/Aug/2021:05:21:06 -0500] "GET /server-status HTTP/1.1" 200 17571 "-" "Wget/1.14 (linux-gnu)"


Error_log :

[Tue Jul 20 03:34:40.112610 2021] [access_compat:error] [pid 27617] [client 16.109.213.89:56424] AH01797: client denied by server configuration: /var/www/html/server-status
[Tue Jul 20 03:34:40.780455 2021] [core:error] [pid 10057] [client 16.109.213.89:33855] AH00126: Invalid URI in request GET /dana-na/../dana/html5acc/guacamole/../../../../../../etc/passwd?/dana/html5acc/guacamole/ HTTP/1.1
[Tue Jul 20 03:34:41.114858 2021] [access_compat:error] [pid 15727] [client 16.109.213.89:32826] AH01797: client denied by server configuration: /var/www/html/server-status
[Tue Jul 20 03:34:41.244695 2021] [access_compat:error] [pid 13546] [client 16.109.213.89:58549] AH01797: client denied by server configuration: /var/www/html/server-status
[Tue Jul 20 03:34:42.834792 2021] [core:error] [pid 10057] [client 16.109.213.89:40737] AH00126: Invalid URI in request POST _async/AsyncResponseService HTTP/1.1
[Tue Jul 20 04:14:47.386923 2021] [access_compat:error] [pid 5575] [client 16.109.210.156:49949] AH01797: client denied by server configuration: /var/www/html/server-status
[Tue Jul 20 04:14:47.605916 2021] [access_compat:error] [pid 6788] [client 16.109.210.156:57123] AH01797: client denied by server configuration: /var/www/html/server-status
[Tue Jul 20 04:14:47.615656 2021] [access_compat:error] [pid 12424] [client 16.109.210.156:54702] AH01797: client denied by server configuration: /var/www/html/server-status
[Tue Jul 20 04:14:47.873175 2021] [access_compat:error] [pid 6788] [client 16.109.210.156:45451] AH01797: client denied by server configuration: /var/www/html/server-status
[Tue Jul 20 04:14:47.886321 2021] [access_compat:error] [pid 10197] [client 16.109.210.156:57154] AH01797: client denied by server configuration: /var/www/html/server-status
[Tue Jul 20 04:14:47.888212 2021] [access_compat:error] [pid 5575] [client 16.109.210.156:33364] AH01797: client denied by server configuration: /var/www/html/server-status
[Tue Jul 20 04:14:48.076229 2021] [access_compat:error] [pid 9652] [client 16.109.210.156:51876] AH01797: client denied by server configuration: /var/www/html/server-status
[Tue Jul 20 04:14:50.331858 2021] [core:error] [pid 5575] [client 16.109.210.156:47738] AH00126: Invalid URI in request GET /dana-na/../dana/html5acc/guacamole/../../../../../../etc/passwd?/dana/html5acc/guacamole/ HTTP/1.1
[Tue Jul 20 04:14:52.881932 2021] [core:error] [pid 12612] [client 16.109.210.156:44790] AH00126: Invalid URI in request POST _async/AsyncResponseService HTTP/1.1
[Tue Jul 27 03:30:28.236168 2021] [access_compat:error] [pid 23480] [client 16.109.216.68:35829] AH01797: client denied by server configuration: /var/www/html/server-status
[Tue Jul 27 03:30:28.246978 2021] [access_compat:error] [pid 17969] [client 16.109.216.68:53773] AH01797: client denied by server configuration: /var/www/html/server-status
[Tue Jul 27 03:30:28.251566 2021] [access_compat:error] [pid 4706] [client 16.109.216.68:42847] AH01797: client denied by server configuration: /var/www/html/server-status
[Tue Jul 27 03:30:28.251762 2021] [access_compat:error] [pid 20963] [client 16.109.216.68:52281] AH01797: client denied by server configuration: /var/www/html/server-status
[Tue Jul 27 03:30:28.448610 2021] [access_compat:error] [pid 4706] [client 16.109.216.68:56078] AH01797: client denied by server configuration: /var/www/html/server-status
[Tue Jul 27 03:30:28.459566 2021] [access_compat:error] [pid 20963] [client 16.109.216.68:54150] AH01797: client denied by server configuration: /var/www/html/server-status
[Tue Jul 27 03:30:28.460553 2021] [access_compat:error] [pid 22902] [client 16.109.216.68:44681] AH01797: client denied by server configuration: /var/www/html/server-status
[Tue Jul 27 03:30:28.663045 2021] [core:error] [pid 25232] [client 16.109.216.68:51685] AH00126: Invalid URI in request GET /dana-na/../dana/html5acc/guacamole/../../../../../../etc/passwd?/dana/html5acc/guacamole/ HTTP/1.1
[Tue Jul 27 03:30:30.781485 2021] [core:error] [pid 24731] [client 16.109.216.68:45572] AH00126: Invalid URI in request POST _async/AsyncResponseService HTTP/1.1
[Tue Jul 27 03:40:47.871016 2021] [access_compat:error] [pid 29274] [client 16.109.213.89:45013] AH01797: client denied by server configuration: /var/www/html/server-status
[Tue Jul 27 03:40:47.871796 2021] [access_compat:error] [pid 20554] [client 16.109.213.89:52271] AH01797: client denied by server configuration: /var/www/html/server-status
[Tue Jul 27 03:40:47.931338 2021] [access_compat:error] [pid 4706] [client 16.109.213.89:46767] AH01797: client denied by server configuration: /var/www/html/server-status
[Tue Jul 27 03:40:48.081214 2021] [access_compat:error] [pid 29274] [client 16.109.213.89:35213] AH01797: client denied by server configuration: /var/www/html/server-status
[Tue Jul 27 03:40:48.136032 2021] [access_compat:error] [pid 15406] [client 16.109.213.89:47053] AH01797: client denied by server configuration: /var/www/html/server-status
[Tue Jul 27 03:40:48.137193 2021] [access_compat:error] [pid 8539] [client 16.109.213.89:34218] AH01797: client denied by server configuration: /var/www/html/server-status
[Tue Jul 27 03:40:48.142790 2021] [access_compat:error] [pid 4706] [client 16.109.213.89:48389] AH01797: client denied by server configuration: /var/www/html/server-status
[Tue Jul 27 03:40:48.851380 2021] [core:error] [pid 27952] [client 16.109.213.89:40859] AH00126: Invalid URI in request GET /dana-na/../dana/html5acc/guacamole/../../../../../../etc/passwd?/dana/html5acc/guacamole/ HTTP/1.1
[Tue Jul 27 03:43:17.879562 2021] [core:error] [pid 25544] [client 16.109.213.89:54453] AH00126: Invalid URI in request POST _async/AsyncResponseService HTTP/1.1
[Tue Aug 03 03:38:47.486672 2021] [access_compat:error] [pid 22096] [client 16.109.213.86:44529] AH01797: client denied by server configuration: /var/www/html/server-status
[Tue Aug 03 03:38:47.491247 2021] [access_compat:error] [pid 22285] [client 16.109.213.86:35091] AH01797: client denied by server configuration: /var/www/html/server-status
[Tue Aug 03 03:38:47.492692 2021] [access_compat:error] [pid 24162] [client 16.109.213.86:47806] AH01797: client denied by server configuration: /var/www/html/server-status
[Tue Aug 03 03:38:48.028181 2021] [access_compat:error] [pid 25145] [client 16.109.213.86:56523] AH01797: client denied by server configuration: /var/www/html/server-status
[Tue Aug 03 03:38:48.146066 2021] [core:error] [pid 15414] [client 16.109.213.86:46484] AH00126: Invalid URI in request GET /dana-na/../dana/html5acc/guacamole/../../../../../../etc/passwd?/dana/html5acc/guacamole/ HTTP/1.1
[Tue Aug 03 03:38:48.612065 2021] [access_compat:error] [pid 25145] [client 16.109.213.86:55561] AH01797: client denied by server configuration: /var/www/html/server-status
[Tue Aug 03 03:38:48.668582 2021] [access_compat:error] [pid 15414] [client 16.109.213.86:36727] AH01797: client denied by server configuration: /var/www/html/server-status
[Tue Aug 03 03:38:48.807243 2021] [access_compat:error] [pid 11675] [client 16.109.213.86:44987] AH01797: client denied by server configuration: /var/www/html/server-status
[Tue Aug 03 03:41:23.488100 2021] [core:error] [pid 28534] [client 16.109.213.86:41021] AH00126: Invalid URI in request POST _async/AsyncResponseService HTTP/1.1
[Tue Aug 03 04:12:58.257638 2021] [access_compat:error] [pid 6459] [client 16.109.210.156:59019] AH01797: client denied by server configuration: /var/www/html/server-status
[Tue Aug 03 04:12:58.293263 2021] [access_compat:error] [pid 26837] [client 16.109.210.156:43664] AH01797: client denied by server configuration: /var/www/html/server-status
[Tue Aug 03 04:12:58.553051 2021] [access_compat:error] [pid 26837] [client 16.109.210.156:43152] AH01797: client denied by server configuration: /var/www/html/server-status
[Tue Aug 03 04:12:58.685215 2021] [access_compat:error] [pid 25537] [client 16.109.210.156:59088] AH01797: client denied by server configuration: /var/www/html/server-status
[Tue Aug 03 04:12:59.036346 2021] [access_compat:error] [pid 23010] [client 16.109.210.156:34752] AH01797: client denied by server configuration: /var/www/html/server-status
[Tue Aug 03 04:12:59.163889 2021] [access_compat:error] [pid 26837] [client 16.109.210.156:38347] AH01797: client denied by server configuration: /var/www/html/server-status
[Tue Aug 03 04:12:59.188426 2021] [access_compat:error] [pid 11148] [client 16.109.210.156:58187] AH01797: client denied by server configuration: /var/www/html/server-status
[Tue Aug 03 04:13:01.217057 2021] [core:error] [pid 28803] [client 16.109.210.156:54618] AH00126: Invalid URI in request GET /dana-na/../dana/html5acc/guacamole/../../../../../../etc/passwd?/dana/html5acc/guacamole/ HTTP/1.1
[Tue Aug 03 04:13:04.199085 2021] [core:error] [pid 29026] [client 16.109.210.156:42380] AH00126: Invalid URI in request POST _async/AsyncResponseService HTTP/1.1
Top
User avatar
pbroste
Posts: 1288
Joined: Tue Jun 01, 2021 1:27 pm

Re: XDELETE API is not working getting permission error

Post by pbroste »

Hello @prashant.v01

Thanks for following with the results, and was wondering which user account you are using to run API?

Please verify that the user is authorized to run api's (Admin > Manage Users > Select user > Security Settings).

Image

Thanks,
Perry
Top
prashant.v01
Posts: 15
Joined: Tue Jun 23, 2020 7:12 am

Re: XDELETE API is not working getting permission error

Post by prashant.v01 »

Hi Perry,

Mentioned user have "admin" access & API access .

Thanks & Regards,
Prashant
Top
User avatar
pbroste
Posts: 1288
Joined: Tue Jun 01, 2021 1:27 pm

Re: XDELETE API is not working getting permission error

Post by pbroste »

Hello @prashant.v01

We will need to take a look at your System Profile to see what is going on.

To send us your system profile.
  • Login to the Nagios XI GUI using a web browser.
  • Click the "Admin" > "System Profile" Menu
  • Click the "Download Profile" button
  • Save the profile.zip file and Private Message it over
Thanks,
Perry
Top
Locked

Return to “Nagios XI”