[ale] Need help with Nagios

Chuck Payne terrorpup at gmail.com
Tue Jan 26 14:28:02 EST 2010


On Tue, Jan 26, 2010 at 11:53 AM, Chuck Payne <terrorpup at gmail.com> wrote:
> On Tue, Jan 26, 2010 at 8:18 AM, Lightner, Jeff <jlightner at water.com> wrote:
>> Curious why you're doing a new install of Nagios 2.x given that 3.x has
>> been out for quite some time?
>>
>> By the way since Ubuntu is based on Debian if you do go the 3.x route
>> the Ubuntu quickstart guide here my help:
>> http://nagios.sourceforge.net/docs/3_0/quickstart-ubuntu.html
>>
>>
>>
>> -----Original Message-----
>> From: ale-bounces at ale.org [mailto:ale-bounces at ale.org] On Behalf Of
>> Richard Bronosky
>> Sent: Tuesday, January 26, 2010 6:24 AM
>> To: Atlanta Linux Enthusiasts - Yes! We run Linux!
>> Subject: Re: [ale] Need help with Nagios
>>
>> I can't give you a link because I'm on my BB, but goto
>> http://httpd.apache.org/ and search for DocumentRoot. Your problem is
>> likely due to the use of a symlink. The default behavior is to be
>> strict about requiring that the real path be within the DocumentRoot.
>> I find that I must always link from my project directory into my
>> docroot (real, fake) not from my docroot to my project (fake, real).
>> Even though the later is how I'd prefer to organize things. It's a
>> security issue. If someone were to find a way to create a symlink via
>> an exploit, they wouldn't be able to use it.
>>
>> On 1/25/10, Chuck Payne <terrorpup at gmail.com> wrote:
>>> Guys,
>>>
>>> I am helping a friend with Nagios 2.6, on Debian 4.0. The install
>>> appears to be ok, but the problem is that when we access the pages, we
>>> are seeing this error.
>>>
>>>
>>> <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
>>> <html><head>
>>> <title>500 Internal Server Error</title>
>>> </head><body>
>>> <h1>Internal Server Error</h1>
>>> <p>The server encountered an internal error or
>>> misconfiguration and was unable to complete
>>> your request.</p>
>>> <p>Please contact the server administrator,
>>>  webmaster at localhost and inform them of the time the error occurred,
>>> and anything you might have done that may have
>>> caused the error.</p>
>>> <p>More information about this error may be available
>>> in the server error log.</p>
>>> <hr>
>>> <address>Apache/2.2.3 (Debian) DAV/2 SVN/1.4.2 mod_jk/1.2.18
>>> mod_python/3.2.10 Python/2.4.4 PHP/5.2.0-8+etch16 mod_ssl/2.2.3
>>> OpenSSL/0.9.8c mod_perl/2.0.2 Perl/v5.8.8 Server at localhost Port
>>> 80</address>
>>> </body></html>
>>>
>>>
>>> When I look in the error log, I am seeing this...
>>>
>>> Mon Jan 25 23:35:53 2010] [error] [client 216.47.87.22] suexec policy
>>> violation: see suexec log for more details, referer:
>>> http://inferno.magidesign.com/nagios2/side.html
>>> [Mon Jan 25 23:35:53 2010] [error] [client 216.47.87.22] Premature end
>>> of script headers: history.cgi, referer:
>>> http://inferno.magidesign.com/nagios2/side.html
>>> [Mon Jan 25 23:35:55 2010] [error] [client 216.47.87.22] suexec policy
>>> violation: see suexec log for more details, referer:
>>> http://inferno.magidesign.com/nagios2/side.html
>>> [Mon Jan 25 23:35:55 2010] [error] [client 216.47.87.22] Premature end
>>> of script headers: tac.cgi, referer:
>>> http://inferno.magidesign.com/nagios2/side.html
>>>
>>> When I look at suexec.log I am seeing this
>>>
>>> 2010-01-25 23:35:53]: uid: (117/dspam) gid: (120/120) cmd: history.cgi
>>> [2010-01-25 23:35:53]: command not in docroot
>>> (/usr/lib/cgi-bin/nagios2/history.cgi)
>>> [2010-01-25 23:35:55]: uid: (117/dspam) gid: (120/120) cmd: tac.cgi
>>> [2010-01-25 23:35:55]: command not in docroot
>>> (/usr/lib/cgi-bin/nagios2/tac.cgi)
>>>
>>>
>>> I have checked it looks like all are owned by nagios  with the group
>>> www-data, but the uid appears to be dspam? Do I need make that nagios
>>> is uid 117 and gid 120 to work? What is the docroot? What do I need to
>>> check there.
>>>
>>> --
>>> -----------------------------------------
>>> Discover it! Enjoy it! Share it! openSUSE Linux.
>>> -----------------------------------------
>>> openSUSE -- en.opensuse.org/User:Terrorpup
>>> openSUSE Ambassador
>>> openSUSE Member
>>> skype -- terrorpup
>>> twitter -- terrorpup
>>> Identica -- terrorpup
>>> freenode(irc) -- terrorpup/lupinstein.
>>> friendfeed -- friendfeed.com/terrorpup
>>>
>>> Have you tried SUSE Studio? Need to create a Live CD,  an app you want
>>> to package and distribute , or create your own linux distro. Give SUSE
>>> Studio a try.
>>> www.susestudio.com
>>> _______________________________________________
>>> Ale mailing list
>>> Ale at ale.org
>>> http://mail.ale.org/mailman/listinfo/ale
>>> See JOBS, ANNOUNCE and SCHOOLS lists at
>>> http://mail.ale.org/mailman/listinfo
>>>
>>
>> --
>> Sent from my mobile device
>>
>> .!# RichardBronosky #!.
>> _______________________________________________
>> Ale mailing list
>> Ale at ale.org
>> http://mail.ale.org/mailman/listinfo/ale
>> See JOBS, ANNOUNCE and SCHOOLS lists at
>> http://mail.ale.org/mailman/listinfo
>>
>> Proud partner. Susan G. Komen for the Cure.
>>
>> Please consider our environment before printing this e-mail or attachments.
>> ----------------------------------
>> CONFIDENTIALITY NOTICE: This e-mail may contain privileged or confidential information and is for the sole use of the intended recipient(s). If you are not the intended recipient, any disclosure, copying, distribution, or use of the contents of this information is prohibited and may be unlawful. If you have received this electronic transmission in error, please reply immediately to the sender that you have received the message in error, and delete it. Thank you.
>> ----------------------------------
>>
>> _______________________________________________
>> Ale mailing list
>> Ale at ale.org
>> http://mail.ale.org/mailman/listinfo/ale
>> See JOBS, ANNOUNCE and SCHOOLS lists at
>> http://mail.ale.org/mailman/listinfo
>>
>
> I will give that a shoot. The reason, it Debain 4.0 on ppc and it a
> production box. But again Jeff I will give that a shot.
>
> --
> -----------------------------------------
> Discover it! Enjoy it! Share it! openSUSE Linux.
> -----------------------------------------
> openSUSE -- en.opensuse.org/User:Terrorpup
> openSUSE Ambassador
> openSUSE Member
> skype -- terrorpup
> twitter -- terrorpup
> Identica -- terrorpup
> freenode(irc) -- terrorpup/lupinstein.
> friendfeed -- friendfeed.com/terrorpup
>
> Have you tried SUSE Studio? Need to create a Live CD,  an app you want
> to package and distribute , or create your own linux distro. Give SUSE
> Studio a try.
> www.susestudio.com
>

Guys, the same thing as Nagios3 as two, there has to be something in
apache that doing it.

-- 
-----------------------------------------
Discover it! Enjoy it! Share it! openSUSE Linux.
-----------------------------------------
openSUSE -- en.opensuse.org/User:Terrorpup
openSUSE Ambassador
openSUSE Member
skype -- terrorpup
twitter -- terrorpup
Identica -- terrorpup
freenode(irc) -- terrorpup/lupinstein.
friendfeed -- friendfeed.com/terrorpup

Have you tried SUSE Studio? Need to create a Live CD,  an app you want
to package and distribute , or create your own linux distro. Give SUSE
Studio a try.
www.susestudio.com



More information about the Ale mailing list