Hi All,<div><br></div><div>Turns out that the FCGI wrapper process was running under a different user than both the web server and nagios and although CGI scripts were running, that may have contributed to the problem.</div>
<div><br></div><div>I also noticed that there were other nagios processes running at the same time that should have been previously killed but were not so that may also have been a contributing factor.</div><div><br></div>
<div>I've now normalized all of the web processes with the same user:</div><div><br></div><div>1. Nginx</div><div>2. PHP</div><div>3. FCGIWrapper</div><div>4. Nagios service</div><div><br></div><div>and the problem seems to be resolved.</div>
<div><br></div><div>Thanks to everyone for their support, suggestions and help.</div><div><br></div><div><br><br><div class="gmail_quote">On Sun, Oct 3, 2010 at 4:30 PM, Rutger Blom <span dir="ltr"><<a href="mailto:rutger@blokje.net">rutger@blokje.net</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"><div bgcolor="#FFFFFF"><div>Have you verified that the user you log in with into the Nagios CGI has permission to execute commands? </div>
<div><br></div><div>Rutger<br><br>On 3 okt 2010, at 21.25, Robert Wolfe <<a href="mailto:robert.wolfe@robertwolfe.org" target="_blank">robert.wolfe@robertwolfe.org</a>> wrote:<br>
<br></div><div></div><blockquote type="cite"><div><div><p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D">Unfortunately, I did the same and am still getting the same error.</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"> </span></p><p class="MsoNormal"><b><span style="font-size:10.0pt">From:</span></b><span style="font-size:10.0pt"> Ilan Berkner [mailto:<a href="mailto:iberkner@gmail.com" target="_blank">iberkner@gmail.com</a>] <br>
<b>Sent:</b> Sunday, October 03, 2010 1:35 PM<br><b>To:</b> Nagios Users List<br><b>Subject:</b> Re: [Nagios-users] nagios.cmd permission issue</span></p><div><div></div><div class="h5"><p class="MsoNormal"> </p><p class="MsoNormal">
I've reconfigured nagios to run as the same user and group as that of the web server. Still getting this command file issue.</p>
<div><p class="MsoNormal"> </p></div><div><p class="MsoNormal">Any other suggestions?</p></div><div><p class="MsoNormal"> </p></div><div><p class="MsoNormal" style="margin-bottom:12.0pt">Many thanks...</p><div><p class="MsoNormal">
On Sun, Oct 3, 2010 at 1:25 PM, Ilan Berkner <<a href="mailto:iberkner@gmail.com" target="_blank"></a><a href="mailto:iberkner@gmail.com" target="_blank">iberkner@gmail.com</a>> wrote:</p><p class="MsoNormal">Yep, there's no question that's what it is, but I've set it up so that the webserver user is part of the group that owns the rw directory with the sticky bit set, but no luck (yet)</p>
<div><div><p class="MsoNormal" style="margin-bottom:12.0pt"> </p><div><p class="MsoNormal">On Sun, Oct 3, 2010 at 10:37 AM, Marc Powell <<a href="mailto:lists@xodus.org" target="_blank"></a><a href="mailto:lists@xodus.org" target="_blank">lists@xodus.org</a>> wrote:</p>
<div><p class="MsoNormal" style="margin-bottom:12.0pt"><br>On Oct 3, 2010, at 8:48 AM, Ilan Berkner wrote:<br><br>> Did not work, probably b/c I'm restarting the service as root?<br>><br>> Is there a way to tell under which user nagios is trying to access the nagios.cmd file?</p>
</div><p class="MsoNormal">Your web server is trying to write to the pipe so it's whatever user your web server is configured to run as.<br><br>--<br><span style="color:#888888">Marc</span></p><div><div><p class="MsoNormal">
<br><br>------------------------------------------------------------------------------<br>Start uncovering the many advantages of virtual appliances<br>and start using them to simplify application deployment and<br>accelerate your shift to cloud computing.<br>
<a href="http://p.sf.net/sfu/novell-sfdev2dev" target="_blank"></a><a href="http://p.sf.net/sfu/novell-sfdev2dev" target="_blank">http://p.sf.net/sfu/novell-sfdev2dev</a><br>_______________________________________________<br>
Nagios-users mailing list<br>
<a href="mailto:Nagios-users@lists.sourceforge.net" target="_blank"></a><a href="mailto:Nagios-users@lists.sourceforge.net" target="_blank">Nagios-users@lists.sourceforge.net</a><br><a href="https://lists.sourceforge.net/lists/listinfo/nagios-users" target="_blank"></a><a href="https://lists.sourceforge.net/lists/listinfo/nagios-users" target="_blank">https://lists.sourceforge.net/lists/listinfo/nagios-users</a><br>
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue.<br>::: Messages without supporting info will risk being sent to /dev/null</p></div></div></div><p class="MsoNormal"> </p></div></div>
</div><p class="MsoNormal"> </p></div></div></div></div></div></blockquote><blockquote type="cite"><div><span>------------------------------------------------------------------------------</span><br><span>Virtualization is moving to the mainstream and overtaking non-virtualized</span><br>
<span>environment for deploying applications. Does it make network security </span><br><span>easier or more difficult to achieve? Read this whitepaper to separate the </span><br><span>two and get a better understanding.</span><br>
<span><a href="http://p.sf.net/sfu/hp-phase2-d2d" target="_blank">http://p.sf.net/sfu/hp-phase2-d2d</a></span></div></blockquote><div class="im"><blockquote type="cite"><div><span>_______________________________________________</span><br>
<span>Nagios-users mailing list</span><br>
<span><a href="mailto:Nagios-users@lists.sourceforge.net" target="_blank">Nagios-users@lists.sourceforge.net</a></span><br><span><a href="https://lists.sourceforge.net/lists/listinfo/nagios-users" target="_blank">https://lists.sourceforge.net/lists/listinfo/nagios-users</a></span><br>
<span>::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. </span><br><span>::: Messages without supporting info will risk being sent to /dev/null</span></div></blockquote></div></div>
<br>------------------------------------------------------------------------------<br>
Virtualization is moving to the mainstream and overtaking non-virtualized<br>
environment for deploying applications. Does it make network security<br>
easier or more difficult to achieve? Read this whitepaper to separate the<br>
two and get a better understanding.<br>
<a href="http://p.sf.net/sfu/hp-phase2-d2d" target="_blank">http://p.sf.net/sfu/hp-phase2-d2d</a><br>_______________________________________________<br>
Nagios-users mailing list<br>
<a href="mailto:Nagios-users@lists.sourceforge.net">Nagios-users@lists.sourceforge.net</a><br>
<a href="https://lists.sourceforge.net/lists/listinfo/nagios-users" target="_blank">https://lists.sourceforge.net/lists/listinfo/nagios-users</a><br>
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue.<br>
::: Messages without supporting info will risk being sent to /dev/null<br></blockquote></div><br></div>