<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Martin J. Green wrote:
<blockquote
cite="mid5F54491268C784439D51B163322EE58C2F7B6B@gorilla.hq.altien.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html; ">
<meta name="Generator" content="Microsoft Word 11 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";
color:black;}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:blue;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:Arial;
color:navy;}
@page Section1
{size:595.3pt 841.9pt;
margin:72.0pt 90.0pt 72.0pt 90.0pt;}
div.Section1
{page:Section1;}
-->
</style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="Section1">
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span
style="font-size: 10pt; font-family: Arial; color: navy;">I can’t get
external commands to
work either (appears it can’t write to the file for some reason), but
its
so low on my list of priorities I haven’t gotten to it yet.<o:p></o:p></span></font></p>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span
style="font-size: 10pt; font-family: Arial; color: navy;"><o:p> </o:p></span></font></p>
<div>
<div class="MsoNormal" style="text-align: center;" align="center"><font
color="black" face="Times New Roman" size="3"><span
style="font-size: 12pt; color: windowtext;" lang="EN-US">
<hr tabindex="-1" align="center" size="2" width="100%"></span></font></div>
<p class="MsoNormal"><b><font color="black" face="Tahoma" size="2"><span
style="font-size: 10pt; font-family: Tahoma; color: windowtext; font-weight: bold;"
lang="EN-US">From:</span></font></b><font color="black" face="Tahoma"
size="2"><span
style="font-size: 10pt; font-family: Tahoma; color: windowtext;"
lang="EN-US">
<a class="moz-txt-link-abbreviated" href="mailto:nagios-users-bounces@lists.sourceforge.net">nagios-users-bounces@lists.sourceforge.net</a>
[<a class="moz-txt-link-freetext" href="mailto:nagios-users-bounces@lists.sourceforge.net">mailto:nagios-users-bounces@lists.sourceforge.net</a>] <b><span
style="font-weight: bold;">On Behalf Of </span></b>Hari Sekhon<br>
<b><span style="font-weight: bold;">Sent:</span></b> 01 August 2006
13:48<br>
<b><span style="font-weight: bold;">To:</span></b>
<a class="moz-txt-link-abbreviated" href="mailto:nagios-users@lists.sourceforge.net">nagios-users@lists.sourceforge.net</a><br>
<b><span style="font-weight: bold;">Subject:</span></b>
[Nagios-users] Externals
Commands</span></font><font color="black"><span
style="color: windowtext;" lang="EN-US"><o:p></o:p></span></font></p>
</div>
<p class="MsoNormal"><font color="black" face="Times New Roman"
size="3"><span style="font-size: 12pt;"><o:p> </o:p></span></font></p>
<p class="MsoNormal" style="margin-bottom: 12pt;"><font color="black"
face="Times New Roman" size="3"><span style="font-size: 12pt;">I am
having real
difficulty getting external commands to work and don't full understand
what's
going wrong, despite having RTFMing several times.<br>
<br>
As an example, I log in to the web interface as nagiosadmin via basic
apache
auth successfully as usual. I go to "comments" in the left hand pane
and enter one for a host but when I click submit, I get the error:<o:p></o:p></span></font></p>
<div>
<p class="MsoNormal"><font color="black" face="Times New Roman"
size="3"><span style="font-size: 12pt;">"Sorry, but you are not
authorized to commit the
specified command.<o:p></o:p></span></font></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom: 12pt;"><font color="black"
face="Times New Roman" size="3"><span style="font-size: 12pt;">Read
the section of the
documentation that deals with authentication and authorization in the
CGIs for
more information.<br>
<br>
<a href="javascript:window.history.go(-2)">Return from whence you
came"</a><br>
<br>
As far as I can tell, I have all the perms set right according to the
docs:<br>
<br>
cgi.cfg<br>
<br>
use_authentication=1<br>
authorized_for_system_information=nagiosadmin<br>
authorized_for_configuration_information=nagiosadmin<br>
authorized_for_system_commands=nagiosadmin<br>
authorized_for_all_services=nagiosadmin<br>
authorized_for_all_hosts=nagiosadmin<br>
authorized_for_all_service_commands=nagiosadmin<br>
authorized_for_all_host_commands=nagiosadmin<br>
<br>
nagios.cfg<br>
<br>
command_file=/var/nagios/rw/nagios.cmd<br>
check_external_commands=1<br>
# NOTE: Setting this value to -1 causes Nagios to check the external<br>
# command file as often as possible.<br>
command_check_interval=-1<br>
<br>
ll /var/nagios/ | grep rw/<br>
drwxrws--- 2 nagios apache 4096 Aug 1 13:28 rw/<br>
<br>
ll /var/nagios/rw/nagios.cmd<br>
prw-rw---- 1 nagios apache 0 Aug 1 13:28 /var/nagios/rw/nagios.cmd|<br>
<br>
The apache process is run by the apache user, a member of the apache
group, so
has full perms to the directory and the pipe file nagios.cmd. Nagios is
run by
nagios who is also a member of the apache group.<br>
<br>
This all looks as it should be according to the docs as far as I can
see.<o:p></o:p></span></font></p>
</div>
<p class="MsoNormal" style="margin-bottom: 12pt;"><font color="black"
face="Times New Roman" size="3"><span style="font-size: 12pt;">What am
I missing?<br>
<br>
<br>
Hari<o:p></o:p></span></font></p>
</div>
</blockquote>
<br>
I think quite a lot of people have trouble with this but a lot give up
or are satisfied that the main bit is working and don't bother with
this...<br>
<br>
does anybody have this working and if so could you post your configs so
I can see anything you have different to me?<br>
<br>
are external commands generally broken or is there something missing in
the docs/our configs/our brains?<br>
<br>
I'm using Version 1.4.1<br>
<br>
Hari<br>
</body>
</html>