Need help with upgrade from 4.3.17 to 4.3.20
Hmm. So far, the only way I've been able to reproduce this is by replacing the ScriptAlias directives with mere Alias's in the xymon.conf apache config.
Has there been any change in the path you've used for the CGI directory since the previous version, or is there any chance that another Alias line is taking precedence over the ScriptAlias?
Do you see anything in the apache access/error logs that indicates an error?
-jc
On Tue, May 19, 2015 10:37 am, Cortes, Manny wrote:
Having the same problem after installing 4.3.20 on both Ubuntu server 14.04 and 15.04.
Thanks,
Manuel A Cortes
Systems Programmer III
[IBM_Cert]
IBM Certified System Administrator AIX 7
Information Services
321-841-6534
Orlandohealth.com
Facebook.com/orlandohealth
Youtube.com/orlandohealth
@orlandohealth on twitter
1414 Kuhl Avenue.,MP136
Orlando, Florida 32806
From: Xymon [mailto:xymon-bounces at xymon.com] On Behalf Of Asif Iqbal Sent: Tuesday, May 19, 2015 12:59 PM To: J.C. Cleaver Cc: xymon at xymon.com Subject: Re: [Xymon] Need help with upgrade from 4.3.17 to 4.3.20
On Tue, May 19, 2015 at 12:40 PM, J.C. Cleaver <cleaver at terabithia.org<mailto:cleaver at terabithia.org>> wrote: Hmm. It seems like it's trying to pass along the binary rather than actually execute it. Can you
a) validate the permissions on the various .sh files inside the /xymon-cgi/ directory. (Wondering if there's a case where make install doesn't set permissions properly), and
/var/lib/xymon/cgi-bin$ ls -al total 6560 drwxr-xr-x 2 root root 4096 May 19 10:19 . drwxr-xr-x 16 xymon xymon 4096 May 19 10:19 .. -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 acknowledgements.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 appfeed-critical.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 appfeed.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 certreport.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 columndoc.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 confreport-critical.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 confreport.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 criticalview.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 csvinfo.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 datepage.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 eventlog.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 findhost.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 ghostlist.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 historylog.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 history.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 hostgraphs.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 hostlist.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 nongreen.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 notifications.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 perfdata.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 reportlog.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 report.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 showgraph.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 snapshot.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 svcstatus.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 topchanges.sh
b) verify that the ScriptAlias or ExecCGI options are still present in apache.conf.
grep xymon-cgi /etc/apache2/sites-enabled/xymon-apache.conf
"/xymon" and "/xymon-cgi" URLs.
ScriptAlias /xymon-cgi/ "/var/lib/xymon/cgi-bin/" RewriteRule ^/xymon-cgi/bb-hist.sh /xymon-cgi/history.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-eventlog.sh /xymon-cgi/eventlog.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-rep.sh /xymon-cgi/report.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-replog.sh /xymon-cgi/reportlog.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-snapshot.sh /xymon-cgi/snapshot.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-findhost.sh /xymon-cgi/findhost.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-csvinfo.sh /xymon-cgi/csvinfo.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbitcolumn.sh /xymon-cgi/columndoc.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-datepage.sh /xymon-cgi/datepage.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbitgraph.sh /xymon-cgi/showgraph.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-hostsvc.sh /xymon-cgi/svcstatus.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-histlog.sh /xymon-cgi/historylog.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-confreport.sh /xymon-cgi/confreport.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-confreport-critical.sh /xymon-cgi/confreport-critical.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-nkview.sh /xymon-cgi/criticalview.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-certreport.sh /xymon-cgi/certreport.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-nongreen.sh /xymon-cgi/nongreen.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-hostgraphs.sh /xymon-cgi/hostgraphs.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-ghosts.sh /xymon-cgi/ghostlist.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-notifylog.sh /xymon-cgi/notifications.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-hostlist.sh /xymon-cgi/hostlist.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-perfdata.sh /xymon-cgi/perfdata.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-topchanges.sh /xymon-cgi/topchanges.sh [R=permanent,L]
HTH,
-jc
On Tue, May 19, 2015 7:56 am, Asif Iqbal wrote:
I am not sure what I need to after the upgrade for the columns to show data instead of something like this
ELF ��������� �>� ��� @�����@������� à ���������@�8� �@�%�"� ��� ���@�������@�@�����@�@�����ø ������ø ������ ������� ��� ���8 ������8 @�����8 @����� ������� ������� ������� ��� �������������@�������@�����ää������ää��������
I removed FollowSymLinks from xymon-apache.conf file under /xymon-cgi/ and /xymon-seccgi/ and restarted.
I am using ubuntu
-- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu<http://pgp.mit.edu> A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing?
Xymon mailing list Xymon at xymon.com<mailto:Xymon at xymon.com> http://lists.xymon.com/mailman/listinfo/xymon
-- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu<http://pgp.mit.edu> A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing?
This e-mail message and any attached files are confidential and are intended solely for the use of the addressee(s) named above. If you are not the intended recipient, any review, use, or distribution of this e-mail message and any attached files is strictly prohibited.
This communication may contain material protected by Federal privacy regulations, attorney-client work product, or other privileges. If you have received this confidential communication in error, please notify the sender immediately by reply e-mail message and permanently delete the original message. To reply to our email administrator directly, send an email to: postmaster at orlandohealth.com .
If this e-mail message concerns a contract matter, be advised that no employee or agent is authorized to conclude any binding agreement on behalf of Orlando Health by e-mail without express written confirmation by an officer of the corporation. Any views or opinions presented in this e-mail are solely those of the author and do not necessarily represent those of Orlando Health.
On Tue, May 19, 2015 at 2:06 PM, J.C. Cleaver <cleaver at terabithia.org> wrote:
Hmm. So far, the only way I've been able to reproduce this is by replacing the ScriptAlias directives with mere Alias's in the xymon.conf apache config.
I am using the config, as is, that came as xymon-apache.conf with the source 4.3.20
Has there been any change in the path you've used for the CGI directory since the previous version, or is there any chance that another Alias line
xymon and xymon-client debian version 4.3.17 has been removed, so no more xymon in /usr/lib/xymon
is taking precedence over the ScriptAlias?
Do you see anything in the apache access/error logs that indicates an error?
It does not generate any log event in error.log or access.log when clicking a column line disk
-jc
On Tue, May 19, 2015 10:37 am, Cortes, Manny wrote:
Having the same problem after installing 4.3.20 on both Ubuntu server 14.04 and 15.04.
Thanks,
Manuel A Cortes
Systems Programmer III
[IBM_Cert]
IBM Certified System Administrator AIX 7
Information Services
321-841-6534
Orlandohealth.com
Facebook.com/orlandohealth
Youtube.com/orlandohealth
@orlandohealth on twitter
1414 Kuhl Avenue.,MP136
Orlando, Florida 32806
From: Xymon [mailto:xymon-bounces at xymon.com] On Behalf Of Asif Iqbal Sent: Tuesday, May 19, 2015 12:59 PM To: J.C. Cleaver Cc: xymon at xymon.com Subject: Re: [Xymon] Need help with upgrade from 4.3.17 to 4.3.20
On Tue, May 19, 2015 at 12:40 PM, J.C. Cleaver <cleaver at terabithia.org<mailto:cleaver at terabithia.org>> wrote: Hmm. It seems like it's trying to pass along the binary rather than actually execute it. Can you
a) validate the permissions on the various .sh files inside the /xymon-cgi/ directory. (Wondering if there's a case where make install doesn't set permissions properly), and
/var/lib/xymon/cgi-bin$ ls -al total 6560 drwxr-xr-x 2 root root 4096 May 19 10:19 . drwxr-xr-x 16 xymon xymon 4096 May 19 10:19 .. -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 acknowledgements.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 appfeed-critical.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 appfeed.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 certreport.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 columndoc.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 confreport-critical.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 confreport.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 criticalview.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 csvinfo.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 datepage.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 eventlog.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 findhost.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 ghostlist.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 historylog.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 history.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 hostgraphs.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 hostlist.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 nongreen.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 notifications.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 perfdata.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 reportlog.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 report.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 showgraph.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 snapshot.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 svcstatus.sh -rwxr-xr-x 32 xymon xymon 255968 May 19 10:19 topchanges.sh
b) verify that the ScriptAlias or ExecCGI options are still present in apache.conf.
grep xymon-cgi /etc/apache2/sites-enabled/xymon-apache.conf
"/xymon" and "/xymon-cgi" URLs.
ScriptAlias /xymon-cgi/ "/var/lib/xymon/cgi-bin/" RewriteRule ^/xymon-cgi/bb-hist.sh /xymon-cgi/history.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-eventlog.sh /xymon-cgi/eventlog.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-rep.sh /xymon-cgi/report.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-replog.sh /xymon-cgi/reportlog.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-snapshot.sh /xymon-cgi/snapshot.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-findhost.sh /xymon-cgi/findhost.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-csvinfo.sh /xymon-cgi/csvinfo.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbitcolumn.sh /xymon-cgi/columndoc.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-datepage.sh /xymon-cgi/datepage.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbitgraph.sh /xymon-cgi/showgraph.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-hostsvc.sh /xymon-cgi/svcstatus.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-histlog.sh /xymon-cgi/historylog.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-confreport.sh /xymon-cgi/confreport.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-confreport-critical.sh /xymon-cgi/confreport-critical.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-nkview.sh /xymon-cgi/criticalview.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-certreport.sh /xymon-cgi/certreport.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-nongreen.sh /xymon-cgi/nongreen.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-hostgraphs.sh /xymon-cgi/hostgraphs.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-ghosts.sh /xymon-cgi/ghostlist.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-notifylog.sh /xymon-cgi/notifications.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-hostlist.sh /xymon-cgi/hostlist.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-perfdata.sh /xymon-cgi/perfdata.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-topchanges.sh /xymon-cgi/topchanges.sh [R=permanent,L]
HTH,
-jc
On Tue, May 19, 2015 7:56 am, Asif Iqbal wrote:
I am not sure what I need to after the upgrade for the columns to show data instead of something like this
ELF ��������� �>� ��� @�����@������� Þ ���������@�8� �@�%�"� ��� ���@�������@�@�����@�@�����ø ������ø ������ ������� ��� ���8 ������8 @�����8 @����� ������� ������� ������� ��� �������������@�������@�����ää������ää��������
I removed FollowSymLinks from xymon-apache.conf file under /xymon-cgi/ and /xymon-seccgi/ and restarted.
I am using ubuntu
-- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu<http://pgp.mit.edu> A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing?
Xymon mailing list Xymon at xymon.com<mailto:Xymon at xymon.com> http://lists.xymon.com/mailman/listinfo/xymon
-- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu<http://pgp.mit.edu> A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing?
This e-mail message and any attached files are confidential and are intended solely for the use of the addressee(s) named above. If you are not the intended recipient, any review, use, or distribution of this e-mail message and any attached files is strictly prohibited.
This communication may contain material protected by Federal privacy regulations, attorney-client work product, or other privileges. If you have received this confidential communication in error, please notify the sender immediately by reply e-mail message and permanently delete the original message. To reply to our email administrator directly, send an email to: postmaster at orlandohealth.com .
If this e-mail message concerns a contract matter, be advised that no employee or agent is authorized to conclude any binding agreement on behalf of Orlando Health by e-mail without express written confirmation by an officer of the corporation. Any views or opinions presented in this e-mail are solely those of the author and do not necessarily represent those of Orlando Health.
-- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing?
On Tue, May 19, 2015 12:04 pm, Asif Iqbal wrote:
On Tue, May 19, 2015 at 2:06 PM, J.C. Cleaver <cleaver at terabithia.org> wrote:
Hmm. So far, the only way I've been able to reproduce this is by replacing the ScriptAlias directives with mere Alias's in the xymon.conf apache config.
I am using the config, as is, that came as xymon-apache.conf with the source 4.3.20
Has there been any change in the path you've used for the CGI directory since the previous version, or is there any chance that another Alias line
xymon and xymon-client debian version 4.3.17 has been removed, so no more xymon in /usr/lib/xymon
On Tue, May 19, 2015 10:37 am, Cortes, Manny wrote:
Having the same problem after installing 4.3.20 on both Ubuntu server 14.04 and 15.04.
Thanks,
Can you send a copy of the previous and current xymon.conf configs?
If the layout is altered, I'd still think the ScriptAlias directive should be pointing to the correct location.
Regards,
-jc
On Tue, May 19, 2015 at 6:39 PM, J.C. Cleaver <cleaver at terabithia.org> wrote:
On Tue, May 19, 2015 12:04 pm, Asif Iqbal wrote:
On Tue, May 19, 2015 at 2:06 PM, J.C. Cleaver <cleaver at terabithia.org> wrote:
Hmm. So far, the only way I've been able to reproduce this is by replacing the ScriptAlias directives with mere Alias's in the xymon.conf apache config.
I am using the config, as is, that came as xymon-apache.conf with the source 4.3.20
Has there been any change in the path you've used for the CGI directory since the previous version, or is there any chance that another Alias line
xymon and xymon-client debian version 4.3.17 has been removed, so no more xymon in /usr/lib/xymon
On Tue, May 19, 2015 10:37 am, Cortes, Manny wrote:
Having the same problem after installing 4.3.20 on both Ubuntu server 14.04 and 15.04.
Thanks,
Can you send a copy of the previous and current xymon.conf configs?
Here is the current config
/etc/apache2/sites-enabled$ egrep -v "^$|^#" xymon-apache.conf
Alias /xymon/ "/var/lib/xymon/server/www/" <Directory "/var/lib/xymon/server/www"> Options Indexes FollowSymLinks Includes MultiViews <IfModule mod_authz_core.c> # Apache 2.4+ Require all granted </IfModule> <IfModule !mod_authz_core.c> Order deny,allow Allow from all </IfModule> </Directory> ScriptAlias /xymon-cgi/ "/var/lib/xymon/cgi-bin/" <Directory "/var/lib/xymon/cgi-bin"> AllowOverride None Options ExecCGI FollowSymLinks Includes <IfModule mod_authz_core.c> # Apache 2.4+ Require all granted </IfModule> <IfModule !mod_authz_core.c> Order deny,allow Allow from all </IfModule> </Directory> ScriptAlias /xymon-seccgi/ "/var/lib/xymon/cgi-secure/" <Directory "/var/lib/xymon/cgi-secure"> AllowOverride None Options ExecCGI FollowSymLinks Includes <IfModule mod_authz_core.c> # Apache 2.4+ Require all granted </IfModule> <IfModule !mod_authz_core.c> Order deny,allow Allow from all </IfModule> # Password file where users with access to these scripts are kept. # Create it with "htpasswd -c /var/lib/xymon/server/etc/xymonpasswd USERNAME" # Add more users / change passwords with "htpasswd /var/lib/xymon/server/etc/xymonpasswd USERNAME" # # You can also use a group file to restrict admin access to members of a # group, instead of anyone who is logged in. In that case you must setup # the "xymongroups" file, and change the "Require" settings to require # a specific group membership. See the Apache docs for more details. AuthUserFile /var/lib/xymon/server/etc/xymonpasswd AuthGroupFile /var/lib/xymon/server/etc/xymongroups AuthType Basic AuthName "Xymon Administration" # "valid-user" restricts access to anyone who is logged in. Require valid-user # "group admins" restricts access to users who have logged in, AND # are members of the "admins" group in xymongroups. # Require group admins </Directory> RewriteEngine On RewriteRule ^/xymon/bb.html /xymon/xymon.html [R=permanent,L] RewriteRule ^/xymon/bb2.html /xymon/nongreen.html [R=permanent,L] RewriteRule ^/xymon/bbnk.html /xymon/critical.html [R=permanent,L] RewriteRule ^/xymon-cgi/bb-hist.sh /xymon-cgi/history.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-eventlog.sh /xymon-cgi/eventlog.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-rep.sh /xymon-cgi/report.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-replog.sh /xymon-cgi/reportlog.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-snapshot.sh /xymon-cgi/snapshot.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-findhost.sh /xymon-cgi/findhost.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-csvinfo.sh /xymon-cgi/csvinfo.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbitcolumn.sh /xymon-cgi/columndoc.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-datepage.sh /xymon-cgi/datepage.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbitgraph.sh /xymon-cgi/showgraph.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-hostsvc.sh /xymon-cgi/svcstatus.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-histlog.sh /xymon-cgi/historylog.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-confreport.sh /xymon-cgi/confreport.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-confreport-critical.sh /xymon-cgi/confreport-critical.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-nkview.sh /xymon-cgi/criticalview.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-certreport.sh /xymon-cgi/certreport.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-nongreen.sh /xymon-cgi/nongreen.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-hostgraphs.sh /xymon-cgi/hostgraphs.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-ghosts.sh /xymon-cgi/ghostlist.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-notifylog.sh /xymon-cgi/notifications.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-hostlist.sh /xymon-cgi/hostlist.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-perfdata.sh /xymon-cgi/perfdata.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-topchanges.sh /xymon-cgi/topchanges.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/bb-ack.sh /xymon-seccgi/acknowledge.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/hobbit-enadis.sh /xymon-seccgi/enadis.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/hobbit-nkedit.sh /xymon-seccgi/criticaleditor.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/hobbit-ackinfo.sh /xymon-seccgi/ackinfo.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/hobbit-useradm.sh /xymon-seccgi/useradm.sh [R=permanent,L]
I do not have any old config as I removed the old install
If the layout is altered, I'd still think the ScriptAlias directive should be pointing to the correct location.
Regards,
-jc
-- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing?
On Wed, May 20, 2015 8:10 am, Asif Iqbal wrote:
On Tue, May 19, 2015 at 6:39 PM, J.C. Cleaver <cleaver at terabithia.org> wrote:
On Tue, May 19, 2015 12:04 pm, Asif Iqbal wrote:
On Tue, May 19, 2015 at 2:06 PM, J.C. Cleaver <cleaver at terabithia.org> wrote:
Hmm. So far, the only way I've been able to reproduce this is by replacing the ScriptAlias directives with mere Alias's in the xymon.conf apache config.
I am using the config, as is, that came as xymon-apache.conf with the source 4.3.20
Has there been any change in the path you've used for the CGI directory since the previous version, or is there any chance that another Alias line
xymon and xymon-client debian version 4.3.17 has been removed, so no more xymon in /usr/lib/xymon
On Tue, May 19, 2015 10:37 am, Cortes, Manny wrote:
Having the same problem after installing 4.3.20 on both Ubuntu server 14.04 and 15.04.
Thanks,
Can you send a copy of the previous and current xymon.conf configs?
Here is the current config
/etc/apache2/sites-enabled$ egrep -v "^$|^#" xymon-apache.conf
Alias /xymon/ "/var/lib/xymon/server/www/" <Directory "/var/lib/xymon/server/www"> Options Indexes FollowSymLinks Includes MultiViews <IfModule mod_authz_core.c> # Apache 2.4+ Require all granted </IfModule> <IfModule !mod_authz_core.c> Order deny,allow Allow from all </IfModule> </Directory> ScriptAlias /xymon-cgi/ "/var/lib/xymon/cgi-bin/" <Directory "/var/lib/xymon/cgi-bin"> AllowOverride None Options ExecCGI FollowSymLinks Includes <IfModule mod_authz_core.c> # Apache 2.4+ Require all granted </IfModule> <IfModule !mod_authz_core.c> Order deny,allow Allow from all </IfModule> </Directory> ScriptAlias /xymon-seccgi/ "/var/lib/xymon/cgi-secure/" <Directory "/var/lib/xymon/cgi-secure"> AllowOverride None Options ExecCGI FollowSymLinks Includes <IfModule mod_authz_core.c> # Apache 2.4+ Require all granted </IfModule> <IfModule !mod_authz_core.c> Order deny,allow Allow from all </IfModule> # Password file where users with access to these scripts are kept. # Create it with "htpasswd -c /var/lib/xymon/server/etc/xymonpasswd USERNAME" # Add more users / change passwords with "htpasswd /var/lib/xymon/server/etc/xymonpasswd USERNAME" # # You can also use a group file to restrict admin access to members of a # group, instead of anyone who is logged in. In that case you must setup # the "xymongroups" file, and change the "Require" settings to require # a specific group membership. See the Apache docs for more details. AuthUserFile /var/lib/xymon/server/etc/xymonpasswd AuthGroupFile /var/lib/xymon/server/etc/xymongroups AuthType Basic AuthName "Xymon Administration" # "valid-user" restricts access to anyone who is logged in. Require valid-user # "group admins" restricts access to users who have logged in, AND # are members of the "admins" group in xymongroups. # Require group admins </Directory> RewriteEngine On RewriteRule ^/xymon/bb.html /xymon/xymon.html [R=permanent,L] RewriteRule ^/xymon/bb2.html /xymon/nongreen.html [R=permanent,L] RewriteRule ^/xymon/bbnk.html /xymon/critical.html [R=permanent,L] RewriteRule ^/xymon-cgi/bb-hist.sh /xymon-cgi/history.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-eventlog.sh /xymon-cgi/eventlog.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-rep.sh /xymon-cgi/report.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-replog.sh /xymon-cgi/reportlog.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-snapshot.sh /xymon-cgi/snapshot.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-findhost.sh /xymon-cgi/findhost.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-csvinfo.sh /xymon-cgi/csvinfo.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbitcolumn.sh /xymon-cgi/columndoc.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-datepage.sh /xymon-cgi/datepage.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbitgraph.sh /xymon-cgi/showgraph.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-hostsvc.sh /xymon-cgi/svcstatus.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-histlog.sh /xymon-cgi/historylog.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-confreport.sh /xymon-cgi/confreport.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-confreport-critical.sh /xymon-cgi/confreport-critical.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-nkview.sh /xymon-cgi/criticalview.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-certreport.sh /xymon-cgi/certreport.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-nongreen.sh /xymon-cgi/nongreen.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-hostgraphs.sh /xymon-cgi/hostgraphs.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-ghosts.sh /xymon-cgi/ghostlist.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-notifylog.sh /xymon-cgi/notifications.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-hostlist.sh /xymon-cgi/hostlist.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-perfdata.sh /xymon-cgi/perfdata.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-topchanges.sh /xymon-cgi/topchanges.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/bb-ack.sh /xymon-seccgi/acknowledge.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/hobbit-enadis.sh /xymon-seccgi/enadis.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/hobbit-nkedit.sh /xymon-seccgi/criticaleditor.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/hobbit-ackinfo.sh /xymon-seccgi/ackinfo.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/hobbit-useradm.sh /xymon-seccgi/useradm.sh [R=permanent,L]
I do not have any old config as I removed the old install
I'm really not sure what to make of this. Everything in the apache config looks to be correct; I can't see at all why apache would fail to execute the CGI vs simply sending you the file.
Can you try two experiments?
First, replace one of the .sh files with a symlink (instead of a hard link) to the cgiwrap binary. I'd like to see if we can rule out the hardlink itself being the problem.
Second, can you compare to the xymon-apache.conf with the xymon-apache-secure.conf.DIST file in the build directory to see if there were any unexpected changes?
Are there any other files in apache's /conf.d/ directory that might be taking precedence here?
-jc
On Wed, May 20, 2015 at 10:36 PM, J.C. Cleaver <cleaver at terabithia.org> wrote:
On Wed, May 20, 2015 8:10 am, Asif Iqbal wrote:
On Tue, May 19, 2015 at 6:39 PM, J.C. Cleaver <cleaver at terabithia.org> wrote:
On Tue, May 19, 2015 12:04 pm, Asif Iqbal wrote:
On Tue, May 19, 2015 at 2:06 PM, J.C. Cleaver <cleaver at terabithia.org
wrote:
Hmm. So far, the only way I've been able to reproduce this is by replacing the ScriptAlias directives with mere Alias's in the xymon.conf apache config.
I am using the config, as is, that came as xymon-apache.conf with the source 4.3.20
Has there been any change in the path you've used for the CGI directory since the previous version, or is there any chance that another Alias line
xymon and xymon-client debian version 4.3.17 has been removed, so no more xymon in /usr/lib/xymon
On Tue, May 19, 2015 10:37 am, Cortes, Manny wrote:
Having the same problem after installing 4.3.20 on both Ubuntu server 14.04 and 15.04.
Thanks,
Can you send a copy of the previous and current xymon.conf configs?
Here is the current config
/etc/apache2/sites-enabled$ egrep -v "^$|^#" xymon-apache.conf
Alias /xymon/ "/var/lib/xymon/server/www/" <Directory "/var/lib/xymon/server/www"> Options Indexes FollowSymLinks Includes MultiViews <IfModule mod_authz_core.c> # Apache 2.4+ Require all granted </IfModule> <IfModule !mod_authz_core.c> Order deny,allow Allow from all </IfModule> </Directory> ScriptAlias /xymon-cgi/ "/var/lib/xymon/cgi-bin/" <Directory "/var/lib/xymon/cgi-bin"> AllowOverride None Options ExecCGI FollowSymLinks Includes <IfModule mod_authz_core.c> # Apache 2.4+ Require all granted </IfModule> <IfModule !mod_authz_core.c> Order deny,allow Allow from all </IfModule> </Directory> ScriptAlias /xymon-seccgi/ "/var/lib/xymon/cgi-secure/" <Directory "/var/lib/xymon/cgi-secure"> AllowOverride None Options ExecCGI FollowSymLinks Includes <IfModule mod_authz_core.c> # Apache 2.4+ Require all granted </IfModule> <IfModule !mod_authz_core.c> Order deny,allow Allow from all </IfModule> # Password file where users with access to these scripts are kept. # Create it with "htpasswd -c /var/lib/xymon/server/etc/xymonpasswd USERNAME" # Add more users / change passwords with "htpasswd /var/lib/xymon/server/etc/xymonpasswd USERNAME" # # You can also use a group file to restrict admin access to members of a # group, instead of anyone who is logged in. In that case you must setup # the "xymongroups" file, and change the "Require" settings to require # a specific group membership. See the Apache docs for more details. AuthUserFile /var/lib/xymon/server/etc/xymonpasswd AuthGroupFile /var/lib/xymon/server/etc/xymongroups AuthType Basic AuthName "Xymon Administration" # "valid-user" restricts access to anyone who is logged in. Require valid-user # "group admins" restricts access to users who have logged in, AND # are members of the "admins" group in xymongroups. # Require group admins </Directory> RewriteEngine On RewriteRule ^/xymon/bb.html /xymon/xymon.html [R=permanent,L] RewriteRule ^/xymon/bb2.html /xymon/nongreen.html [R=permanent,L] RewriteRule ^/xymon/bbnk.html /xymon/critical.html [R=permanent,L] RewriteRule ^/xymon-cgi/bb-hist.sh /xymon-cgi/history.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-eventlog.sh /xymon-cgi/eventlog.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-rep.sh /xymon-cgi/report.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-replog.sh /xymon-cgi/reportlog.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-snapshot.sh /xymon-cgi/snapshot.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-findhost.sh /xymon-cgi/findhost.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-csvinfo.sh /xymon-cgi/csvinfo.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbitcolumn.sh /xymon-cgi/columndoc.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-datepage.sh /xymon-cgi/datepage.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbitgraph.sh /xymon-cgi/showgraph.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-hostsvc.sh /xymon-cgi/svcstatus.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-histlog.sh /xymon-cgi/historylog.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-confreport.sh /xymon-cgi/confreport.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-confreport-critical.sh /xymon-cgi/confreport-critical.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-nkview.sh /xymon-cgi/criticalview.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-certreport.sh /xymon-cgi/certreport.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-nongreen.sh /xymon-cgi/nongreen.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-hostgraphs.sh /xymon-cgi/hostgraphs.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-ghosts.sh /xymon-cgi/ghostlist.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-notifylog.sh /xymon-cgi/notifications.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-hostlist.sh /xymon-cgi/hostlist.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-perfdata.sh /xymon-cgi/perfdata.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-topchanges.sh /xymon-cgi/topchanges.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/bb-ack.sh /xymon-seccgi/acknowledge.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/hobbit-enadis.sh /xymon-seccgi/enadis.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/hobbit-nkedit.sh /xymon-seccgi/criticaleditor.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/hobbit-ackinfo.sh /xymon-seccgi/ackinfo.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/hobbit-useradm.sh /xymon-seccgi/useradm.sh [R=permanent,L]
I do not have any old config as I removed the old install
I'm really not sure what to make of this. Everything in the apache config looks to be correct; I can't see at all why apache would fail to execute the CGI vs simply sending you the file.
Can you try two experiments?
First, replace one of the .sh files with a symlink (instead of a hard link) to the cgiwrap binary. I'd like to see if we can rule out the hardlink itself being the problem.
I did that and still seeing the same garbage when click a column /var/lib/xymon/cgi-bin$ ls -al svcstatus.sh lrwxrwxrwx 1 root root 21 May 21 10:29 svcstatus.sh -> ../server/bin/cgiwrap So that did not make any difference
Second, can you compare to the xymon-apache.conf with the xymon-apache-secure.conf.DIST file in the build directory to see if there were any unexpected changes?
I see the two files look identical. The conf file was not under build dir. $ diff -u /etc/apache2/sites-enabled/xymon-apache.conf xymon-4.3.20/xymond/etcfiles/xymon-apache-secure.DIST --- /etc/apache2/sites-enabled/xymon-apache.conf 2015-05-21 10:25:08.174803811 -0400 +++ xymon-4.3.20/xymond/etcfiles/xymon-apache-secure.DIST 2015-03-13 02:15:38.000000000 -0400 @@ -2,17 +2,17 @@ # # Add this to your Apache configuration, it makes # the Xymon webpages and cgi-scripts available in the -# "/xymon" and "/xymon-cgi" URLs. +# "@XYMONHOSTURL@" and "@XYMONCGIURL@" URLs. # NB: The "Alias" line below must NOT be used if you have # the Xymon webfiles as the root URL. In that case, # you should instead set this: # -# DocumentRoot /var/lib/xymon/server/www +# DocumentRoot @INSTALLWWWDIR@ -Alias /xymon/ "/var/lib/xymon/server/www/" -<Directory "/var/lib/xymon/server/www"> +Alias @XYMONHOSTURL@/ "@INSTALLWWWDIR@/" +<Directory "@INSTALLWWWDIR@"> Options Indexes FollowSymLinks Includes MultiViews <IfModule mod_authz_core.c> # Apache 2.4+ @@ -24,9 +24,8 @@ </IfModule> </Directory> -ScriptAlias /xymon-cgi/ "/var/lib/xymon/cgi-bin/" -<Directory "/var/lib/xymon/cgi-bin"> -SetHandler cgi-script +ScriptAlias @XYMONCGIURL@/ "@CGIDIR@/" +<Directory "@CGIDIR@"> AllowOverride None Options ExecCGI FollowSymLinks Includes <IfModule mod_authz_core.c> @@ -39,9 +38,8 @@ </IfModule> </Directory> -ScriptAlias /xymon-seccgi/ "/var/lib/xymon/cgi-secure/" -<Directory "/var/lib/xymon/cgi-secure"> -SetHandler cgi-script +ScriptAlias @SECUREXYMONCGIURL@/ "@SECURECGIDIR@/" +<Directory "@SECURECGIDIR@"> AllowOverride None Options ExecCGI FollowSymLinks Includes <IfModule mod_authz_core.c> @@ -54,16 +52,16 @@ </IfModule> # Password file where users with access to these scripts are kept. - # Create it with "htpasswd -c /var/lib/xymon/server/etc/xymonpasswd USERNAME" - # Add more users / change passwords with "htpasswd /var/lib/xymon/server/etc/xymonpasswd USERNAME" + # Create it with "htpasswd -c @INSTALLETCDIR@/xymonpasswd USERNAME" + # Add more users / change passwords with "htpasswd @INSTALLETCDIR@/xymonpasswd USERNAME" # # You can also use a group file to restrict admin access to members of a # group, instead of anyone who is logged in. In that case you must setup # the "xymongroups" file, and change the "Require" settings to require # a specific group membership. See the Apache docs for more details. - AuthUserFile /var/lib/xymon/server/etc/xymonpasswd - AuthGroupFile /var/lib/xymon/server/etc/xymongroups + AuthUserFile @INSTALLETCDIR@/xymonpasswd + AuthGroupFile @INSTALLETCDIR@/xymongroups AuthType Basic AuthName "Xymon Administration" @@ -79,37 +77,37 @@ # Rewrite-rules for migrating from the URL's used in Hobbit RewriteEngine On -RewriteRule ^/xymon/bb.html /xymon/xymon.html [R=permanent,L] -RewriteRule ^/xymon/bb2.html /xymon/nongreen.html [R=permanent,L] -RewriteRule ^/xymon/bbnk.html /xymon/critical.html [R=permanent,L] - -RewriteRule ^/xymon-cgi/bb-hist.sh /xymon-cgi/history.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-eventlog.sh /xymon-cgi/eventlog.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-rep.sh /xymon-cgi/report.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-replog.sh /xymon-cgi/reportlog.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-snapshot.sh /xymon-cgi/snapshot.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-findhost.sh /xymon-cgi/findhost.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-csvinfo.sh /xymon-cgi/csvinfo.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbitcolumn.sh /xymon-cgi/columndoc.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-datepage.sh /xymon-cgi/datepage.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbitgraph.sh /xymon-cgi/showgraph.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-hostsvc.sh /xymon-cgi/svcstatus.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-histlog.sh /xymon-cgi/historylog.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-confreport.sh /xymon-cgi/confreport.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-confreport-critical.sh /xymon-cgi/confreport-critical.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-nkview.sh /xymon-cgi/criticalview.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-certreport.sh /xymon-cgi/certreport.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-nongreen.sh /xymon-cgi/nongreen.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-hostgraphs.sh /xymon-cgi/hostgraphs.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-ghosts.sh /xymon-cgi/ghostlist.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-notifylog.sh /xymon-cgi/notifications.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-hostlist.sh /xymon-cgi/hostlist.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-perfdata.sh /xymon-cgi/perfdata.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-topchanges.sh /xymon-cgi/topchanges.sh [R=permanent,L] - -RewriteRule ^/xymon-seccgi/bb-ack.sh /xymon-seccgi/acknowledge.sh [R=permanent,L] -RewriteRule ^/xymon-seccgi/hobbit-enadis.sh /xymon-seccgi/enadis.sh [R=permanent,L] -RewriteRule ^/xymon-seccgi/hobbit-nkedit.sh /xymon-seccgi/criticaleditor.sh [R=permanent,L] -RewriteRule ^/xymon-seccgi/hobbit-ackinfo.sh /xymon-seccgi/ackinfo.sh [R=permanent,L] -RewriteRule ^/xymon-seccgi/hobbit-useradm.sh /xymon-seccgi/useradm.sh [R=permanent,L] +RewriteRule ^@XYMONHOSTURL@/bb.html @XYMONHOSTURL@/xymon.html [R=permanent,L] +RewriteRule ^@XYMONHOSTURL@/bb2.html @XYMONHOSTURL@/nongreen.html [R=permanent,L] +RewriteRule ^@XYMONHOSTURL@/bbnk.html @XYMONHOSTURL@/critical.html [R=permanent,L] + +RewriteRule ^@XYMONCGIURL@/bb-hist.sh @XYMONCGIURL@/history.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-eventlog.sh @XYMONCGIURL@/eventlog.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-rep.sh @XYMONCGIURL@/report.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-replog.sh @XYMONCGIURL@/reportlog.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-snapshot.sh @XYMONCGIURL@/snapshot.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-findhost.sh @XYMONCGIURL@/findhost.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-csvinfo.sh @XYMONCGIURL@/csvinfo.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbitcolumn.sh @XYMONCGIURL@/columndoc.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-datepage.sh @XYMONCGIURL@/datepage.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbitgraph.sh @XYMONCGIURL@/showgraph.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-hostsvc.sh @XYMONCGIURL@/svcstatus.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-histlog.sh @XYMONCGIURL@/historylog.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-confreport.sh @XYMONCGIURL@/confreport.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-confreport-critical.sh @XYMONCGIURL@/confreport-critical.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-nkview.sh @XYMONCGIURL@/criticalview.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-certreport.sh @XYMONCGIURL@/certreport.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-nongreen.sh @XYMONCGIURL@/nongreen.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-hostgraphs.sh @XYMONCGIURL@/hostgraphs.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-ghosts.sh @XYMONCGIURL@/ghostlist.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-notifylog.sh @XYMONCGIURL@/notifications.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-hostlist.sh @XYMONCGIURL@/hostlist.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-perfdata.sh @XYMONCGIURL@/perfdata.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-topchanges.sh @XYMONCGIURL@/topchanges.sh [R=permanent,L] + +RewriteRule ^@SECUREXYMONCGIURL@/bb-ack.sh @SECUREXYMONCGIURL@/acknowledge.sh [R=permanent,L] +RewriteRule ^@SECUREXYMONCGIURL@/hobbit-enadis.sh @SECUREXYMONCGIURL@/enadis.sh [R=permanent,L] +RewriteRule ^@SECUREXYMONCGIURL@/hobbit-nkedit.sh @SECUREXYMONCGIURL@/criticaleditor.sh [R=permanent,L] +RewriteRule ^@SECUREXYMONCGIURL@/hobbit-ackinfo.sh @SECUREXYMONCGIURL@/ackinfo.sh [R=permanent,L] +RewriteRule ^@SECUREXYMONCGIURL@/hobbit-useradm.sh @SECUREXYMONCGIURL@/useradm.sh [R=permanent,L]
Are there any other files in apache's /conf.d/ directory that might be taking precedence here?
Here are the conf files that are active /etc/apache2/conf-enabled$ ls -al total 8 drwxr-xr-x 2 root root 4096 May 19 10:27 . drwxr-xr-x 8 root root 4096 May 19 10:12 .. lrwxrwxrwx 1 root root 34 May 19 10:14 apache2-doc.conf -> ../conf-available/apache2-doc.conf lrwxrwxrwx 1 root root 30 May 19 10:12 charset.conf -> ../conf-available/charset.conf lrwxrwxrwx 1 root root 44 May 19 10:12 localized-error-pages.conf -> ../conf-available/localized-error-pages.conf lrwxrwxrwx 1 root root 46 May 19 10:12 other-vhosts-access-log.conf -> ../conf-available/other-vhosts-access-log.conf lrwxrwxrwx 1 root root 31 May 19 10:12 security.conf -> ../conf-available/security.conf lrwxrwxrwx 1 root root 36 May 19 10:12 serve-cgi-bin.conf -> ../conf-available/serve-cgi-bin.conf /etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" apache2-doc.conf Alias /manual /usr/share/doc/apache2-doc/manual/ <Directory "/usr/share/doc/apache2-doc/manual/"> Options Indexes FollowSymlinks AllowOverride None Require all granted AddDefaultCharset off </Directory> /etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" charset.conf /etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" localized-error-pages.conf /etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" other-vhosts-access-log.conf CustomLog ${APACHE_LOG_DIR}/other_vhosts_access.log vhost_combined /etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" security.conf ServerTokens OS ServerSignature On TraceEnable Off /etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" serve-cgi-bin.conf <IfModule mod_alias.c> <IfModule mod_cgi.c> Define ENABLE_USR_LIB_CGI_BIN </IfModule> <IfModule mod_cgid.c> Define ENABLE_USR_LIB_CGI_BIN </IfModule> <IfDefine ENABLE_USR_LIB_CGI_BIN> ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/ <Directory "/usr/lib/cgi-bin"> AllowOverride None Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch Require all granted </Directory> </IfDefine> </IfModule> /etc/apache2/conf-enabled$
-jc
-- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing?
So really dumb question here. Did you restart apache after removing 4.3.17 and installing 4.3.20? From: Xymon [mailto:xymon-bounces at xymon.com] On Behalf Of Asif Iqbal Sent: Thursday, May 21, 2015 9:47 AM To: J.C. Cleaver Cc: Xymon Mailing List; Cortes, Manny Subject: Re: [Xymon] Need help with upgrade from 4.3.17 to 4.3.20 On Wed, May 20, 2015 at 10:36 PM, J.C. Cleaver <cleaver at terabithia.org<mailto:cleaver at terabithia.org>> wrote: On Wed, May 20, 2015 8:10 am, Asif Iqbal wrote:
On Tue, May 19, 2015 at 6:39 PM, J.C. Cleaver <cleaver at terabithia.org<mailto:cleaver at terabithia.org>> wrote:
On Tue, May 19, 2015 12:04 pm, Asif Iqbal wrote:
On Tue, May 19, 2015 at 2:06 PM, J.C. Cleaver <cleaver at terabithia.org<mailto:cleaver at terabithia.org>> wrote:
Hmm. So far, the only way I've been able to reproduce this is by replacing the ScriptAlias directives with mere Alias's in the xymon.conf apache config.
I am using the config, as is, that came as xymon-apache.conf with the source 4.3.20
Has there been any change in the path you've used for the CGI directory since the previous version, or is there any chance that another Alias line
xymon and xymon-client debian version 4.3.17 has been removed, so no more xymon in /usr/lib/xymon
On Tue, May 19, 2015 10:37 am, Cortes, Manny wrote:
Having the same problem after installing 4.3.20 on both Ubuntu server 14.04 and 15.04.
Thanks,
Can you send a copy of the previous and current xymon.conf configs?
Here is the current config
/etc/apache2/sites-enabled$ egrep -v "^$|^#" xymon-apache.conf
Alias /xymon/ "/var/lib/xymon/server/www/" <Directory "/var/lib/xymon/server/www"> Options Indexes FollowSymLinks Includes MultiViews <IfModule mod_authz_core.c> # Apache 2.4+ Require all granted </IfModule> <IfModule !mod_authz_core.c> Order deny,allow Allow from all </IfModule> </Directory> ScriptAlias /xymon-cgi/ "/var/lib/xymon/cgi-bin/" <Directory "/var/lib/xymon/cgi-bin"> AllowOverride None Options ExecCGI FollowSymLinks Includes <IfModule mod_authz_core.c> # Apache 2.4+ Require all granted </IfModule> <IfModule !mod_authz_core.c> Order deny,allow Allow from all </IfModule> </Directory> ScriptAlias /xymon-seccgi/ "/var/lib/xymon/cgi-secure/" <Directory "/var/lib/xymon/cgi-secure"> AllowOverride None Options ExecCGI FollowSymLinks Includes <IfModule mod_authz_core.c> # Apache 2.4+ Require all granted </IfModule> <IfModule !mod_authz_core.c> Order deny,allow Allow from all </IfModule> # Password file where users with access to these scripts are kept. # Create it with "htpasswd -c /var/lib/xymon/server/etc/xymonpasswd USERNAME" # Add more users / change passwords with "htpasswd /var/lib/xymon/server/etc/xymonpasswd USERNAME" # # You can also use a group file to restrict admin access to members of a # group, instead of anyone who is logged in. In that case you must setup # the "xymongroups" file, and change the "Require" settings to require # a specific group membership. See the Apache docs for more details. AuthUserFile /var/lib/xymon/server/etc/xymonpasswd AuthGroupFile /var/lib/xymon/server/etc/xymongroups AuthType Basic AuthName "Xymon Administration" # "valid-user" restricts access to anyone who is logged in. Require valid-user # "group admins" restricts access to users who have logged in, AND # are members of the "admins" group in xymongroups. # Require group admins </Directory> RewriteEngine On RewriteRule ^/xymon/bb.html /xymon/xymon.html [R=permanent,L] RewriteRule ^/xymon/bb2.html /xymon/nongreen.html [R=permanent,L] RewriteRule ^/xymon/bbnk.html /xymon/critical.html [R=permanent,L] RewriteRule ^/xymon-cgi/bb-hist.sh /xymon-cgi/history.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-eventlog.sh /xymon-cgi/eventlog.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-rep.sh /xymon-cgi/report.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-replog.sh /xymon-cgi/reportlog.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-snapshot.sh /xymon-cgi/snapshot.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-findhost.sh /xymon-cgi/findhost.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-csvinfo.sh /xymon-cgi/csvinfo.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbitcolumn.sh /xymon-cgi/columndoc.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-datepage.sh /xymon-cgi/datepage.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbitgraph.sh /xymon-cgi/showgraph.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-hostsvc.sh /xymon-cgi/svcstatus.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-histlog.sh /xymon-cgi/historylog.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-confreport.sh /xymon-cgi/confreport.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-confreport-critical.sh /xymon-cgi/confreport-critical.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-nkview.sh /xymon-cgi/criticalview.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-certreport.sh /xymon-cgi/certreport.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-nongreen.sh /xymon-cgi/nongreen.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-hostgraphs.sh /xymon-cgi/hostgraphs.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-ghosts.sh /xymon-cgi/ghostlist.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-notifylog.sh /xymon-cgi/notifications.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-hostlist.sh /xymon-cgi/hostlist.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-perfdata.sh /xymon-cgi/perfdata.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-topchanges.sh /xymon-cgi/topchanges.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/bb-ack.sh /xymon-seccgi/acknowledge.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/hobbit-enadis.sh /xymon-seccgi/enadis.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/hobbit-nkedit.sh /xymon-seccgi/criticaleditor.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/hobbit-ackinfo.sh /xymon-seccgi/ackinfo.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/hobbit-useradm.sh /xymon-seccgi/useradm.sh [R=permanent,L]
I do not have any old config as I removed the old install
I'm really not sure what to make of this. Everything in the apache config looks to be correct; I can't see at all why apache would fail to execute the CGI vs simply sending you the file. Can you try two experiments? First, replace one of the .sh files with a symlink (instead of a hard link) to the cgiwrap binary. I'd like to see if we can rule out the hardlink itself being the problem. I did that and still seeing the same garbage when click a column /var/lib/xymon/cgi-bin$ ls -al svcstatus.sh lrwxrwxrwx 1 root root 21 May 21 10:29 svcstatus.sh -> ../server/bin/cgiwrap So that did not make any difference Second, can you compare to the xymon-apache.conf with the xymon-apache-secure.conf.DIST file in the build directory to see if there were any unexpected changes? I see the two files look identical. The conf file was not under build dir. $ diff -u /etc/apache2/sites-enabled/xymon-apache.conf xymon-4.3.20/xymond/etcfiles/xymon-apache-secure.DIST --- /etc/apache2/sites-enabled/xymon-apache.conf 2015-05-21 10:25:08.174803811 -0400 +++ xymon-4.3.20/xymond/etcfiles/xymon-apache-secure.DIST 2015-03-13 02:15:38.000000000 -0400 @@ -2,17 +2,17 @@ # # Add this to your Apache configuration, it makes # the Xymon webpages and cgi-scripts available in the -# "/xymon" and "/xymon-cgi" URLs. +# "@XYMONHOSTURL@" and "@XYMONCGIURL@" URLs. # NB: The "Alias" line below must NOT be used if you have # the Xymon webfiles as the root URL. In that case, # you should instead set this: # -# DocumentRoot /var/lib/xymon/server/www +# DocumentRoot @INSTALLWWWDIR@ -Alias /xymon/ "/var/lib/xymon/server/www/" -<Directory "/var/lib/xymon/server/www"> +Alias @XYMONHOSTURL@/ "@INSTALLWWWDIR@/" +<Directory "@INSTALLWWWDIR@"> Options Indexes FollowSymLinks Includes MultiViews <IfModule mod_authz_core.c> # Apache 2.4+ @@ -24,9 +24,8 @@ </IfModule> </Directory> -ScriptAlias /xymon-cgi/ "/var/lib/xymon/cgi-bin/" -<Directory "/var/lib/xymon/cgi-bin"> -SetHandler cgi-script +ScriptAlias @XYMONCGIURL@/ "@CGIDIR@/" +<Directory "@CGIDIR@"> AllowOverride None Options ExecCGI FollowSymLinks Includes <IfModule mod_authz_core.c> @@ -39,9 +38,8 @@ </IfModule> </Directory> -ScriptAlias /xymon-seccgi/ "/var/lib/xymon/cgi-secure/" -<Directory "/var/lib/xymon/cgi-secure"> -SetHandler cgi-script +ScriptAlias @SECUREXYMONCGIURL@/ "@SECURECGIDIR@/" +<Directory "@SECURECGIDIR@"> AllowOverride None Options ExecCGI FollowSymLinks Includes <IfModule mod_authz_core.c> @@ -54,16 +52,16 @@ </IfModule> # Password file where users with access to these scripts are kept. - # Create it with "htpasswd -c /var/lib/xymon/server/etc/xymonpasswd USERNAME" - # Add more users / change passwords with "htpasswd /var/lib/xymon/server/etc/xymonpasswd USERNAME" + # Create it with "htpasswd -c @INSTALLETCDIR@/xymonpasswd USERNAME" + # Add more users / change passwords with "htpasswd @INSTALLETCDIR@/xymonpasswd USERNAME" # # You can also use a group file to restrict admin access to members of a # group, instead of anyone who is logged in. In that case you must setup # the "xymongroups" file, and change the "Require" settings to require # a specific group membership. See the Apache docs for more details. - AuthUserFile /var/lib/xymon/server/etc/xymonpasswd - AuthGroupFile /var/lib/xymon/server/etc/xymongroups + AuthUserFile @INSTALLETCDIR@/xymonpasswd + AuthGroupFile @INSTALLETCDIR@/xymongroups AuthType Basic AuthName "Xymon Administration" @@ -79,37 +77,37 @@ # Rewrite-rules for migrating from the URL's used in Hobbit RewriteEngine On -RewriteRule ^/xymon/bb.html /xymon/xymon.html [R=permanent,L] -RewriteRule ^/xymon/bb2.html /xymon/nongreen.html [R=permanent,L] -RewriteRule ^/xymon/bbnk.html /xymon/critical.html [R=permanent,L] - -RewriteRule ^/xymon-cgi/bb-hist.sh /xymon-cgi/history.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-eventlog.sh /xymon-cgi/eventlog.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-rep.sh /xymon-cgi/report.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-replog.sh /xymon-cgi/reportlog.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-snapshot.sh /xymon-cgi/snapshot.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-findhost.sh /xymon-cgi/findhost.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-csvinfo.sh /xymon-cgi/csvinfo.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbitcolumn.sh /xymon-cgi/columndoc.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-datepage.sh /xymon-cgi/datepage.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbitgraph.sh /xymon-cgi/showgraph.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-hostsvc.sh /xymon-cgi/svcstatus.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-histlog.sh /xymon-cgi/historylog.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-confreport.sh /xymon-cgi/confreport.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-confreport-critical.sh /xymon-cgi/confreport-critical.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-nkview.sh /xymon-cgi/criticalview.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-certreport.sh /xymon-cgi/certreport.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-nongreen.sh /xymon-cgi/nongreen.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-hostgraphs.sh /xymon-cgi/hostgraphs.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-ghosts.sh /xymon-cgi/ghostlist.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-notifylog.sh /xymon-cgi/notifications.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-hostlist.sh /xymon-cgi/hostlist.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-perfdata.sh /xymon-cgi/perfdata.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-topchanges.sh /xymon-cgi/topchanges.sh [R=permanent,L] - -RewriteRule ^/xymon-seccgi/bb-ack.sh /xymon-seccgi/acknowledge.sh [R=permanent,L] -RewriteRule ^/xymon-seccgi/hobbit-enadis.sh /xymon-seccgi/enadis.sh [R=permanent,L] -RewriteRule ^/xymon-seccgi/hobbit-nkedit.sh /xymon-seccgi/criticaleditor.sh [R=permanent,L] -RewriteRule ^/xymon-seccgi/hobbit-ackinfo.sh /xymon-seccgi/ackinfo.sh [R=permanent,L] -RewriteRule ^/xymon-seccgi/hobbit-useradm.sh /xymon-seccgi/useradm.sh [R=permanent,L] +RewriteRule ^@XYMONHOSTURL@/bb.html<mailto:%5e at XYMONHOSTURL@/bb.html> @XYMONHOSTURL@/xymon.html [R=permanent,L] +RewriteRule ^@XYMONHOSTURL@/bb2.html<mailto:%5e at XYMONHOSTURL@/bb2.html> @XYMONHOSTURL@/nongreen.html [R=permanent,L] +RewriteRule ^@XYMONHOSTURL@/bbnk.html<mailto:%5e at XYMONHOSTURL@/bbnk.html> @XYMONHOSTURL@/critical.html [R=permanent,L] + +RewriteRule ^@XYMONCGIURL@/bb-hist.sh<mailto:%5e at XYMONCGIURL@/bb-hist.sh> @XYMONCGIURL@/history.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-eventlog.sh<mailto:%5e at XYMONCGIURL@/bb-eventlog.sh> @XYMONCGIURL@/eventlog.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-rep.sh<mailto:%5e at XYMONCGIURL@/bb-rep.sh> @XYMONCGIURL@/report.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-replog.sh<mailto:%5e at XYMONCGIURL@/bb-replog.sh> @XYMONCGIURL@/reportlog.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-snapshot.sh<mailto:%5e at XYMONCGIURL@/bb-snapshot.sh> @XYMONCGIURL@/snapshot.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-findhost.sh<mailto:%5e at XYMONCGIURL@/bb-findhost.sh> @XYMONCGIURL@/findhost.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-csvinfo.sh<mailto:%5e at XYMONCGIURL@/bb-csvinfo.sh> @XYMONCGIURL@/csvinfo.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbitcolumn.sh<mailto:%5e at XYMONCGIURL@/hobbitcolumn.sh> @XYMONCGIURL@/columndoc.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-datepage.sh<mailto:%5e at XYMONCGIURL@/bb-datepage.sh> @XYMONCGIURL@/datepage.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbitgraph.sh<mailto:%5e at XYMONCGIURL@/hobbitgraph.sh> @XYMONCGIURL@/showgraph.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-hostsvc.sh<mailto:%5e at XYMONCGIURL@/bb-hostsvc.sh> @XYMONCGIURL@/svcstatus.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-histlog.sh<mailto:%5e at XYMONCGIURL@/bb-histlog.sh> @XYMONCGIURL@/historylog.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-confreport.sh<mailto:%5e at XYMONCGIURL@/hobbit-confreport.sh> @XYMONCGIURL@/confreport.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-confreport-critical.sh<mailto:%5e at XYMONCGIURL@/hobbit-confreport-critical.sh> @XYMONCGIURL@/confreport-critical.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-nkview.sh<mailto:%5e at XYMONCGIURL@/hobbit-nkview.sh> @XYMONCGIURL@/criticalview.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-certreport.sh<mailto:%5e at XYMONCGIURL@/hobbit-certreport.sh> @XYMONCGIURL@/certreport.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-nongreen.sh<mailto:%5e at XYMONCGIURL@/hobbit-nongreen.sh> @XYMONCGIURL@/nongreen.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-hostgraphs.sh<mailto:%5e at XYMONCGIURL@/hobbit-hostgraphs.sh> @XYMONCGIURL@/hostgraphs.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-ghosts.sh<mailto:%5e at XYMONCGIURL@/hobbit-ghosts.sh> @XYMONCGIURL@/ghostlist.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-notifylog.sh<mailto:%5e at XYMONCGIURL@/hobbit-notifylog.sh> @XYMONCGIURL@/notifications.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-hostlist.sh<mailto:%5e at XYMONCGIURL@/hobbit-hostlist.sh> @XYMONCGIURL@/hostlist.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-perfdata.sh<mailto:%5e at XYMONCGIURL@/hobbit-perfdata.sh> @XYMONCGIURL@/perfdata.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-topchanges.sh<mailto:%5e at XYMONCGIURL@/hobbit-topchanges.sh> @XYMONCGIURL@/topchanges.sh [R=permanent,L] + +RewriteRule ^@SECUREXYMONCGIURL@/bb-ack.sh<mailto:%5e at SECUREXYMONCGIURL@/bb-ack.sh> @SECUREXYMONCGIURL@/acknowledge.sh [R=permanent,L] +RewriteRule ^@SECUREXYMONCGIURL@/hobbit-enadis.sh<mailto:%5e at SECUREXYMONCGIURL@/hobbit-enadis.sh> @SECUREXYMONCGIURL@/enadis.sh [R=permanent,L] +RewriteRule ^@SECUREXYMONCGIURL@/hobbit-nkedit.sh<mailto:%5e at SECUREXYMONCGIURL@/hobbit-nkedit.sh> @SECUREXYMONCGIURL@/criticaleditor.sh [R=permanent,L] +RewriteRule ^@SECUREXYMONCGIURL@/hobbit-ackinfo.sh<mailto:%5e at SECUREXYMONCGIURL@/hobbit-ackinfo.sh> @SECUREXYMONCGIURL@/ackinfo.sh [R=permanent,L] +RewriteRule ^@SECUREXYMONCGIURL@/hobbit-useradm.sh<mailto:%5e at SECUREXYMONCGIURL@/hobbit-useradm.sh> @SECUREXYMONCGIURL@/useradm.sh [R=permanent,L] Are there any other files in apache's /conf.d/ directory that might be taking precedence here? Here are the conf files that are active /etc/apache2/conf-enabled$ ls -al total 8 drwxr-xr-x 2 root root 4096 May 19 10:27 . drwxr-xr-x 8 root root 4096 May 19 10:12 .. lrwxrwxrwx 1 root root 34 May 19 10:14 apache2-doc.conf -> ../conf-available/apache2-doc.conf lrwxrwxrwx 1 root root 30 May 19 10:12 charset.conf -> ../conf-available/charset.conf lrwxrwxrwx 1 root root 44 May 19 10:12 localized-error-pages.conf -> ../conf-available/localized-error-pages.conf lrwxrwxrwx 1 root root 46 May 19 10:12 other-vhosts-access-log.conf -> ../conf-available/other-vhosts-access-log.conf lrwxrwxrwx 1 root root 31 May 19 10:12 security.conf -> ../conf-available/security.conf lrwxrwxrwx 1 root root 36 May 19 10:12 serve-cgi-bin.conf -> ../conf-available/serve-cgi-bin.conf /etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" apache2-doc.conf Alias /manual /usr/share/doc/apache2-doc/manual/ <Directory "/usr/share/doc/apache2-doc/manual/"> Options Indexes FollowSymlinks AllowOverride None Require all granted AddDefaultCharset off </Directory> /etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" charset.conf /etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" localized-error-pages.conf /etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" other-vhosts-access-log.conf CustomLog ${APACHE_LOG_DIR}/other_vhosts_access.log vhost_combined /etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" security.conf ServerTokens OS ServerSignature On TraceEnable Off /etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" serve-cgi-bin.conf <IfModule mod_alias.c> <IfModule mod_cgi.c> Define ENABLE_USR_LIB_CGI_BIN </IfModule> <IfModule mod_cgid.c> Define ENABLE_USR_LIB_CGI_BIN </IfModule> <IfDefine ENABLE_USR_LIB_CGI_BIN> ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/ <Directory "/usr/lib/cgi-bin"> AllowOverride None Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch Require all granted </Directory> </IfDefine> </IfModule> /etc/apache2/conf-enabled$ -jc -- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu<http://pgp.mit.edu> A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.
On Thu, May 21, 2015 at 10:51 AM, Root, Paul T <Paul.Root at centurylink.com> wrote:
So really dumb question here. Did you restart apache after removing 4.3.17 and installing 4.3.20?
Yep, few times.
*From:* Xymon [mailto:xymon-bounces at xymon.com] *On Behalf Of *Asif Iqbal *Sent:* Thursday, May 21, 2015 9:47 AM *To:* J.C. Cleaver *Cc:* Xymon Mailing List; Cortes, Manny *Subject:* Re: [Xymon] Need help with upgrade from 4.3.17 to 4.3.20
On Wed, May 20, 2015 at 10:36 PM, J.C. Cleaver <cleaver at terabithia.org> wrote:
On Wed, May 20, 2015 8:10 am, Asif Iqbal wrote:
On Tue, May 19, 2015 at 6:39 PM, J.C. Cleaver <cleaver at terabithia.org> wrote:
On Tue, May 19, 2015 12:04 pm, Asif Iqbal wrote:
On Tue, May 19, 2015 at 2:06 PM, J.C. Cleaver <cleaver at terabithia.org
wrote:
Hmm. So far, the only way I've been able to reproduce this is by replacing the ScriptAlias directives with mere Alias's in the xymon.conf apache config.
I am using the config, as is, that came as xymon-apache.conf with the source 4.3.20
Has there been any change in the path you've used for the CGI directory since the previous version, or is there any chance that another Alias line
xymon and xymon-client debian version 4.3.17 has been removed, so no more xymon in /usr/lib/xymon
On Tue, May 19, 2015 10:37 am, Cortes, Manny wrote:
Having the same problem after installing 4.3.20 on both Ubuntu server 14.04 and 15.04.
Thanks,
Can you send a copy of the previous and current xymon.conf configs?
Here is the current config
/etc/apache2/sites-enabled$ egrep -v "^$|^#" xymon-apache.conf
Alias /xymon/ "/var/lib/xymon/server/www/" <Directory "/var/lib/xymon/server/www"> Options Indexes FollowSymLinks Includes MultiViews <IfModule mod_authz_core.c> # Apache 2.4+ Require all granted </IfModule> <IfModule !mod_authz_core.c> Order deny,allow Allow from all </IfModule> </Directory> ScriptAlias /xymon-cgi/ "/var/lib/xymon/cgi-bin/" <Directory "/var/lib/xymon/cgi-bin"> AllowOverride None Options ExecCGI FollowSymLinks Includes <IfModule mod_authz_core.c> # Apache 2.4+ Require all granted </IfModule> <IfModule !mod_authz_core.c> Order deny,allow Allow from all </IfModule> </Directory> ScriptAlias /xymon-seccgi/ "/var/lib/xymon/cgi-secure/" <Directory "/var/lib/xymon/cgi-secure"> AllowOverride None Options ExecCGI FollowSymLinks Includes <IfModule mod_authz_core.c> # Apache 2.4+ Require all granted </IfModule> <IfModule !mod_authz_core.c> Order deny,allow Allow from all </IfModule> # Password file where users with access to these scripts are kept. # Create it with "htpasswd -c /var/lib/xymon/server/etc/xymonpasswd USERNAME" # Add more users / change passwords with "htpasswd /var/lib/xymon/server/etc/xymonpasswd USERNAME" # # You can also use a group file to restrict admin access to members of a # group, instead of anyone who is logged in. In that case you must setup # the "xymongroups" file, and change the "Require" settings to require # a specific group membership. See the Apache docs for more details. AuthUserFile /var/lib/xymon/server/etc/xymonpasswd AuthGroupFile /var/lib/xymon/server/etc/xymongroups AuthType Basic AuthName "Xymon Administration" # "valid-user" restricts access to anyone who is logged in. Require valid-user # "group admins" restricts access to users who have logged in, AND # are members of the "admins" group in xymongroups. # Require group admins </Directory> RewriteEngine On RewriteRule ^/xymon/bb.html /xymon/xymon.html [R=permanent,L] RewriteRule ^/xymon/bb2.html /xymon/nongreen.html [R=permanent,L] RewriteRule ^/xymon/bbnk.html /xymon/critical.html [R=permanent,L] RewriteRule ^/xymon-cgi/bb-hist.sh /xymon-cgi/history.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-eventlog.sh /xymon-cgi/eventlog.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-rep.sh /xymon-cgi/report.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-replog.sh /xymon-cgi/reportlog.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-snapshot.sh /xymon-cgi/snapshot.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-findhost.sh /xymon-cgi/findhost.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-csvinfo.sh /xymon-cgi/csvinfo.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbitcolumn.sh /xymon-cgi/columndoc.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-datepage.sh /xymon-cgi/datepage.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbitgraph.sh /xymon-cgi/showgraph.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-hostsvc.sh /xymon-cgi/svcstatus.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-histlog.sh /xymon-cgi/historylog.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-confreport.sh /xymon-cgi/confreport.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-confreport-critical.sh /xymon-cgi/confreport-critical.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-nkview.sh /xymon-cgi/criticalview.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-certreport.sh /xymon-cgi/certreport.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-nongreen.sh /xymon-cgi/nongreen.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-hostgraphs.sh /xymon-cgi/hostgraphs.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-ghosts.sh /xymon-cgi/ghostlist.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-notifylog.sh /xymon-cgi/notifications.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-hostlist.sh /xymon-cgi/hostlist.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-perfdata.sh /xymon-cgi/perfdata.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-topchanges.sh /xymon-cgi/topchanges.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/bb-ack.sh /xymon-seccgi/acknowledge.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/hobbit-enadis.sh /xymon-seccgi/enadis.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/hobbit-nkedit.sh /xymon-seccgi/criticaleditor.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/hobbit-ackinfo.sh /xymon-seccgi/ackinfo.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/hobbit-useradm.sh /xymon-seccgi/useradm.sh [R=permanent,L]
I do not have any old config as I removed the old install
I'm really not sure what to make of this. Everything in the apache config looks to be correct; I can't see at all why apache would fail to execute the CGI vs simply sending you the file.
Can you try two experiments?
First, replace one of the .sh files with a symlink (instead of a hard link) to the cgiwrap binary. I'd like to see if we can rule out the hardlink itself being the problem.
I did that and still seeing the same garbage when click a column
/var/lib/xymon/cgi-bin$ ls -al svcstatus.sh
lrwxrwxrwx 1 root root 21 May 21 10:29 svcstatus.sh -> ../server/bin/cgiwrap
So that did not make any difference
Second, can you compare to the xymon-apache.conf with the xymon-apache-secure.conf.DIST file in the build directory to see if there were any unexpected changes?
I see the two files look identical. The conf file was not under build dir.
$ diff -u /etc/apache2/sites-enabled/xymon-apache.conf xymon-4.3.20/xymond/etcfiles/xymon-apache-secure.DIST
--- /etc/apache2/sites-enabled/xymon-apache.conf 2015-05-21 10:25:08.174803811 -0400
+++ xymon-4.3.20/xymond/etcfiles/xymon-apache-secure.DIST 2015-03-13 02:15:38.000000000 -0400
@@ -2,17 +2,17 @@
#
# Add this to your Apache configuration, it makes
# the Xymon webpages and cgi-scripts available in the
-# "/xymon" and "/xymon-cgi" URLs.
+# "@XYMONHOSTURL@" and "@XYMONCGIURL@" URLs.
# NB: The "Alias" line below must NOT be used if you have
# the Xymon webfiles as the root URL. In that case,
# you should instead set this:
#
-# DocumentRoot /var/lib/xymon/server/www
+# DocumentRoot @INSTALLWWWDIR@
-Alias /xymon/ "/var/lib/xymon/server/www/"
-<Directory "/var/lib/xymon/server/www">
+Alias @XYMONHOSTURL@/ "@INSTALLWWWDIR@/"
+<Directory "@INSTALLWWWDIR@">
Options Indexes FollowSymLinks Includes MultiViews
<IfModule mod_authz_core.c>
# Apache 2.4+
@@ -24,9 +24,8 @@
</IfModule>
</Directory>
-ScriptAlias /xymon-cgi/ "/var/lib/xymon/cgi-bin/"
-<Directory "/var/lib/xymon/cgi-bin">
-SetHandler cgi-script
+ScriptAlias @XYMONCGIURL@/ "@CGIDIR@/"
+<Directory "@CGIDIR@">
AllowOverride None
Options ExecCGI FollowSymLinks Includes
<IfModule mod_authz_core.c>
@@ -39,9 +38,8 @@
</IfModule>
</Directory>
-ScriptAlias /xymon-seccgi/ "/var/lib/xymon/cgi-secure/"
-<Directory "/var/lib/xymon/cgi-secure">
-SetHandler cgi-script
+ScriptAlias @SECUREXYMONCGIURL@/ "@SECURECGIDIR@/"
+<Directory "@SECURECGIDIR@">
AllowOverride None
Options ExecCGI FollowSymLinks Includes
<IfModule mod_authz_core.c>
@@ -54,16 +52,16 @@
</IfModule>
# Password file where users with access to these scripts are kept.
- # Create it with "htpasswd -c /var/lib/xymon/server/etc/xymonpasswd USERNAME"
- # Add more users / change passwords with "htpasswd /var/lib/xymon/server/etc/xymonpasswd USERNAME"
+ # Create it with "htpasswd -c @INSTALLETCDIR@/xymonpasswd USERNAME"
+ # Add more users / change passwords with "htpasswd @INSTALLETCDIR@/xymonpasswd USERNAME"
#
# You can also use a group file to restrict admin access to members of a
# group, instead of anyone who is logged in. In that case you must setup
# the "xymongroups" file, and change the "Require" settings to require
# a specific group membership. See the Apache docs for more details.
- AuthUserFile /var/lib/xymon/server/etc/xymonpasswd
- AuthGroupFile /var/lib/xymon/server/etc/xymongroups
+ AuthUserFile @INSTALLETCDIR@/xymonpasswd
+ AuthGroupFile @INSTALLETCDIR@/xymongroups
AuthType Basic
AuthName "Xymon Administration"
@@ -79,37 +77,37 @@
# Rewrite-rules for migrating from the URL's used in Hobbit
RewriteEngine On
-RewriteRule ^/xymon/bb.html /xymon/xymon.html [R=permanent,L]
-RewriteRule ^/xymon/bb2.html /xymon/nongreen.html [R=permanent,L]
-RewriteRule ^/xymon/bbnk.html /xymon/critical.html [R=permanent,L]
-
-RewriteRule ^/xymon-cgi/bb-hist.sh /xymon-cgi/history.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/bb-eventlog.sh /xymon-cgi/eventlog.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/bb-rep.sh /xymon-cgi/report.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/bb-replog.sh /xymon-cgi/reportlog.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/bb-snapshot.sh /xymon-cgi/snapshot.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/bb-findhost.sh /xymon-cgi/findhost.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/bb-csvinfo.sh /xymon-cgi/csvinfo.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/hobbitcolumn.sh /xymon-cgi/columndoc.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/bb-datepage.sh /xymon-cgi/datepage.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/hobbitgraph.sh /xymon-cgi/showgraph.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/bb-hostsvc.sh /xymon-cgi/svcstatus.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/bb-histlog.sh /xymon-cgi/historylog.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/hobbit-confreport.sh /xymon-cgi/confreport.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/hobbit-confreport-critical.sh /xymon-cgi/confreport-critical.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/hobbit-nkview.sh /xymon-cgi/criticalview.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/hobbit-certreport.sh /xymon-cgi/certreport.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/hobbit-nongreen.sh /xymon-cgi/nongreen.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/hobbit-hostgraphs.sh /xymon-cgi/hostgraphs.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/hobbit-ghosts.sh /xymon-cgi/ghostlist.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/hobbit-notifylog.sh /xymon-cgi/notifications.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/hobbit-hostlist.sh /xymon-cgi/hostlist.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/hobbit-perfdata.sh /xymon-cgi/perfdata.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/hobbit-topchanges.sh /xymon-cgi/topchanges.sh [R=permanent,L]
-
-RewriteRule ^/xymon-seccgi/bb-ack.sh /xymon-seccgi/acknowledge.sh [R=permanent,L]
-RewriteRule ^/xymon-seccgi/hobbit-enadis.sh /xymon-seccgi/enadis.sh [R=permanent,L]
-RewriteRule ^/xymon-seccgi/hobbit-nkedit.sh /xymon-seccgi/criticaleditor.sh [R=permanent,L]
-RewriteRule ^/xymon-seccgi/hobbit-ackinfo.sh /xymon-seccgi/ackinfo.sh [R=permanent,L]
-RewriteRule ^/xymon-seccgi/hobbit-useradm.sh /xymon-seccgi/useradm.sh [R=permanent,L]
+RewriteRule ^@XYMONHOSTURL@/bb.html @XYMONHOSTURL@/xymon.html [R=permanent,L]
+RewriteRule ^@XYMONHOSTURL@/bb2.html @XYMONHOSTURL@/nongreen.html [R=permanent,L]
+RewriteRule ^@XYMONHOSTURL@/bbnk.html @XYMONHOSTURL@/critical.html [R=permanent,L]
+
+RewriteRule ^@XYMONCGIURL@/bb-hist.sh @XYMONCGIURL@/history.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/bb-eventlog.sh @XYMONCGIURL@/eventlog.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/bb-rep.sh @XYMONCGIURL@/report.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/bb-replog.sh @XYMONCGIURL@/reportlog.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/bb-snapshot.sh @XYMONCGIURL@/snapshot.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/bb-findhost.sh @XYMONCGIURL@/findhost.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/bb-csvinfo.sh @XYMONCGIURL@/csvinfo.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/hobbitcolumn.sh @XYMONCGIURL@/columndoc.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/bb-datepage.sh @XYMONCGIURL@/datepage.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/hobbitgraph.sh @XYMONCGIURL@/showgraph.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/bb-hostsvc.sh @XYMONCGIURL@/svcstatus.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/bb-histlog.sh @XYMONCGIURL@/historylog.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/hobbit-confreport.sh @XYMONCGIURL@/confreport.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/hobbit-confreport-critical.sh @XYMONCGIURL@/confreport-critical.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/hobbit-nkview.sh @XYMONCGIURL@/criticalview.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/hobbit-certreport.sh @XYMONCGIURL@/certreport.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/hobbit-nongreen.sh @XYMONCGIURL@/nongreen.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/hobbit-hostgraphs.sh @XYMONCGIURL@/hostgraphs.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/hobbit-ghosts.sh @XYMONCGIURL@/ghostlist.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/hobbit-notifylog.sh @XYMONCGIURL@/notifications.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/hobbit-hostlist.sh @XYMONCGIURL@/hostlist.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/hobbit-perfdata.sh @XYMONCGIURL@/perfdata.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/hobbit-topchanges.sh @XYMONCGIURL@/topchanges.sh [R=permanent,L]
+
+RewriteRule ^@SECUREXYMONCGIURL@/bb-ack.sh @SECUREXYMONCGIURL@/acknowledge.sh [R=permanent,L]
+RewriteRule ^@SECUREXYMONCGIURL@/hobbit-enadis.sh @SECUREXYMONCGIURL@/enadis.sh [R=permanent,L]
+RewriteRule ^@SECUREXYMONCGIURL@/hobbit-nkedit.sh @SECUREXYMONCGIURL@/criticaleditor.sh [R=permanent,L]
+RewriteRule ^@SECUREXYMONCGIURL@/hobbit-ackinfo.sh @SECUREXYMONCGIURL@/ackinfo.sh [R=permanent,L]
+RewriteRule ^@SECUREXYMONCGIURL@/hobbit-useradm.sh @SECUREXYMONCGIURL@/useradm.sh [R=permanent,L]
Are there any other files in apache's /conf.d/ directory that might be taking precedence here?
Here are the conf files that are active
/etc/apache2/conf-enabled$ ls -al
total 8
drwxr-xr-x 2 root root 4096 May 19 10:27 .
drwxr-xr-x 8 root root 4096 May 19 10:12 ..
lrwxrwxrwx 1 root root 34 May 19 10:14 apache2-doc.conf -> ../conf-available/apache2-doc.conf
lrwxrwxrwx 1 root root 30 May 19 10:12 charset.conf -> ../conf-available/charset.conf
lrwxrwxrwx 1 root root 44 May 19 10:12 localized-error-pages.conf -> ../conf-available/localized-error-pages.conf
lrwxrwxrwx 1 root root 46 May 19 10:12 other-vhosts-access-log.conf -> ../conf-available/other-vhosts-access-log.conf
lrwxrwxrwx 1 root root 31 May 19 10:12 security.conf -> ../conf-available/security.conf
lrwxrwxrwx 1 root root 36 May 19 10:12 serve-cgi-bin.conf -> ../conf-available/serve-cgi-bin.conf
/etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" apache2-doc.conf
Alias /manual /usr/share/doc/apache2-doc/manual/
<Directory "/usr/share/doc/apache2-doc/manual/">
Options Indexes FollowSymlinks
AllowOverride None
Require all granted
AddDefaultCharset off
</Directory>
/etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" charset.conf
/etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" localized-error-pages.conf
/etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" other-vhosts-access-log.conf
CustomLog ${APACHE_LOG_DIR}/other_vhosts_access.log vhost_combined
/etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" security.conf
ServerTokens OS
ServerSignature On
TraceEnable Off
/etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" serve-cgi-bin.conf
<IfModule mod_alias.c>
<IfModule mod_cgi.c>
Define ENABLE_USR_LIB_CGI_BIN
</IfModule>
<IfModule mod_cgid.c>
Define ENABLE_USR_LIB_CGI_BIN
</IfModule>
<IfDefine ENABLE_USR_LIB_CGI_BIN>
ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/
<Directory "/usr/lib/cgi-bin">
AllowOverride None
Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
Require all granted
</Directory>
</IfDefine>
</IfModule>
/etc/apache2/conf-enabled$
-jc
--
Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.
-- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing?
On Thu, May 21, 2015, at 10:20, Asif Iqbal wrote:
On Thu, May 21, 2015 at 10:51 AM, Root, Paul T <Paul.Root at centurylink.com> wrote:
So really dumb question here. Did you restart apache after removing 4.3.17 and installing 4.3.20?
Yep, few times.
Ok, so ScriptAlias is from mod_alias, but that doesn't mean cgi binaries are actually going to work.
Is mod_cgi actually loaded?
apachectl -t -D DUMP_MODULES | grep cgi
On Thu, May 21, 2015, at 10:46, Mark Felder wrote:
On Thu, May 21, 2015, at 10:20, Asif Iqbal wrote:
On Thu, May 21, 2015 at 10:51 AM, Root, Paul T <Paul.Root at centurylink.com> wrote:
So really dumb question here. Did you restart apache after removing 4.3.17 and installing 4.3.20?
Yep, few times.
Ok, so ScriptAlias is from mod_alias, but that doesn't mean cgi binaries are actually going to work.
and SetHandler/AddHandler is from mod_mime, so neither of these would throw an error if mod_cgi was missing
This, so far, is my best guess for why it's showing the contents of the files and not executing them.
On Thu, May 21, 2015 at 11:46 AM, Mark Felder <feld at feld.me> wrote:
On Thu, May 21, 2015, at 10:20, Asif Iqbal wrote:
On Thu, May 21, 2015 at 10:51 AM, Root, Paul T <Paul.Root at centurylink.com> wrote:
So really dumb question here. Did you restart apache after removing 4.3.17 and installing 4.3.20?
Yep, few times.
Ok, so ScriptAlias is from mod_alias, but that doesn't mean cgi binaries are actually going to work.
Is mod_cgi actually loaded?
apachectl -t -D DUMP_MODULES | grep cgi
cgi module was not present. I just installed it and now most of the column works! Thanks a lot!
I still get the content of the binary for the following columns. rest are good now
bbd memory xymond xymonnet
I also restored svcstatus.sh from hardlink to symlink and removed the two SetHandler lines
Still all the columns now working except the above four. Until I had the cgi module installed none of the columns were working.
Thanks Mark for taking it very close to completely working!
Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon
-- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing?
On Thu, May 21, 2015, at 11:11, Asif Iqbal wrote:
On Thu, May 21, 2015 at 11:46 AM, Mark Felder <feld at feld.me> wrote:
On Thu, May 21, 2015, at 10:20, Asif Iqbal wrote:
On Thu, May 21, 2015 at 10:51 AM, Root, Paul T <Paul.Root at centurylink.com> wrote:
So really dumb question here. Did you restart apache after removing 4.3.17 and installing 4.3.20?
Yep, few times.
Ok, so ScriptAlias is from mod_alias, but that doesn't mean cgi binaries are actually going to work.
Is mod_cgi actually loaded?
apachectl -t -D DUMP_MODULES | grep cgi
cgi module was not present. I just installed it and now most of the column works! Thanks a lot!
I still get the content of the binary for the following columns. rest are good now
bbd memory xymond xymonnet
I also restored svcstatus.sh from hardlink to symlink and removed the two SetHandler lines
Still all the columns now working except the above four. Until I had the cgi module installed none of the columns were working.
Thanks Mark for taking it very close to completely working!
They're all calling svcstatus.sh, so I am guessing you have a browser cache issue.
On Thu, May 21, 2015 at 12:13 PM, Mark Felder <feld at feld.me> wrote:
On Thu, May 21, 2015, at 11:11, Asif Iqbal wrote:
On Thu, May 21, 2015 at 11:46 AM, Mark Felder <feld at feld.me> wrote:
On Thu, May 21, 2015, at 10:20, Asif Iqbal wrote:
On Thu, May 21, 2015 at 10:51 AM, Root, Paul T <Paul.Root at centurylink.com> wrote:
So really dumb question here. Did you restart apache after
removing
4.3.17 and installing 4.3.20?
Yep, few times.
Ok, so ScriptAlias is from mod_alias, but that doesn't mean cgi binaries are actually going to work.
Is mod_cgi actually loaded?
apachectl -t -D DUMP_MODULES | grep cgi
cgi module was not present. I just installed it and now most of the column works! Thanks a lot!
I still get the content of the binary for the following columns. rest are good now
bbd memory xymond xymonnet
I also restored svcstatus.sh from hardlink to symlink and removed the two SetHandler lines
Still all the columns now working except the above four. Until I had the cgi module installed none of the columns were working.
Thanks Mark for taking it very close to completely working!
They're all calling svcstatus.sh, so I am guessing you have a browser cache issue.
Yep you are absolutely right. I started a incognito session and all of the column working!
Thanks a lot to Mark and all for your help!
-- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing?
On Thu, May 21, 2015 at 12:25 PM, Asif Iqbal <vadud3 at gmail.com> wrote:
On Thu, May 21, 2015 at 12:13 PM, Mark Felder <feld at feld.me> wrote:
On Thu, May 21, 2015, at 11:11, Asif Iqbal wrote:
On Thu, May 21, 2015 at 11:46 AM, Mark Felder <feld at feld.me> wrote:
On Thu, May 21, 2015, at 10:20, Asif Iqbal wrote:
On Thu, May 21, 2015 at 10:51 AM, Root, Paul T <Paul.Root at centurylink.com> wrote:
So really dumb question here. Did you restart apache after
removing
4.3.17 and installing 4.3.20?
Yep, few times.
Ok, so ScriptAlias is from mod_alias, but that doesn't mean cgi binaries are actually going to work.
Is mod_cgi actually loaded?
apachectl -t -D DUMP_MODULES | grep cgi
cgi module was not present. I just installed it and now most of the column works! Thanks a lot!
I still get the content of the binary for the following columns. rest are good now
bbd memory xymond xymonnet
I also restored svcstatus.sh from hardlink to symlink and removed the two SetHandler lines
Still all the columns now working except the above four. Until I had the cgi module installed none of the columns were working.
Thanks Mark for taking it very close to completely working!
They're all calling svcstatus.sh, so I am guessing you have a browser cache issue.
Yep you are absolutely right. I started a incognito session and all of the column working!
Thanks a lot to Mark and all for your help!
So essentially all the default config works just fine as long as cgi module is enabled in apache
No need to add SetHandler and default xymon config that comes with distro works. Also no need to make any softlink.
Excellent!
-- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing?
-- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing?
On Thu, May 21, 2015 9:27 am, Asif Iqbal wrote:
So essentially all the default config works just fine as long as cgi module is enabled in apache
No need to add SetHandler and default xymon config that comes with distro works. Also no need to make any softlink.
Excellent!
Ahh, perfect! Thanks!
-jc
On Thu, May 21, 2015 9:13 am, Mark Felder wrote:
On Thu, May 21, 2015, at 11:11, Asif Iqbal wrote:
On Thu, May 21, 2015 at 11:46 AM, Mark Felder <feld at feld.me> wrote:
On Thu, May 21, 2015, at 10:20, Asif Iqbal wrote:
On Thu, May 21, 2015 at 10:51 AM, Root, Paul T <Paul.Root at centurylink.com> wrote:
So really dumb question here. Did you restart apache after
removing
4.3.17 and installing 4.3.20?
Yep, few times.
Ok, so ScriptAlias is from mod_alias, but that doesn't mean cgi binaries are actually going to work.
Is mod_cgi actually loaded?
apachectl -t -D DUMP_MODULES | grep cgi
cgi module was not present. I just installed it and now most of the column works! Thanks a lot!
I still get the content of the binary for the following columns. rest are good now
bbd memory xymond xymonnet
I also restored svcstatus.sh from hardlink to symlink and removed the two SetHandler lines
Still all the columns now working except the above four. Until I had the cgi module installed none of the columns were working.
Thanks Mark for taking it very close to completely working!
They're all calling svcstatus.sh, so I am guessing you have a browser cache issue.
Nice deductions! :) This seems like a good candidate for adding to the FAQ/known docs -- especially if it's not always typical to have mod_cgi present and loaded in some distros.
I also restored svcstatus.sh from hardlink to symlink and removed the two
So just to confirm: the config still works when the .sh files are hardlinked as well? (And without FollowSymLinks?) If there's any issue there, I'd like to get a fix into the install scripts before releasing a 4.3.21 update.
Regards,
-jc
On Thu, May 21, 2015, at 11:30, J.C. Cleaver wrote:
Nice deductions! :) This seems like a good candidate for adding to the FAQ/known docs -- especially if it's not always typical to have mod_cgi present and loaded in some distros.
Maybe add something like this to the config as well:
<IfModule !cgi_module> Error "mod_cgi is required by Xymon. Load it with LoadModule." </IfModule>
I know this is an old issue but the only thing I could find that matches my current problem. We just built a new Ubuntu 18.04 server with Xymon server 4.3.28 and ghostlist.sh and acknowledge.sh show garbage instead of working properly. Most other scripts in the cgi-bin directory seem to work ok and I even created a test python script that worked in the cgi-bin directory. I have run a clean make/install on the Xymon server and still have this problem. Anyone have any ideas? This is what I get when I go to ghostlist.sh (same as original poster): ELF[1]��������� ________________________________ �>����<������@�������(% ________________________________ ���������@�8� �@�%�$���� ________________________________ ���@�������@�������@�������ø������ø������������� ________________________________ ��� ________________________________ ���8[1]������8[1]������8[1]������ ������� ��������������������������������������������(þ������(þ�������� �����������ð[1]�����ð[1]!�����ð[1]!�����œ ������ÐI�������� �����[1]������ ����� !����� ! Thanks, John From: Xymon [mailto:xymon-bounces at xymon.com] On Behalf Of Asif Iqbal Sent: Thursday, May 21, 2015 10:20 AM To: Root, Paul T <Paul.Root at centurylink.com> Cc: Xymon Mailing List <xymon at xymon.com>; Cortes, Manny <Manuel.Cortes at orlandohealth.com> Subject: Re: [Xymon] Need help with upgrade from 4.3.17 to 4.3.20 On Thu, May 21, 2015 at 10:51 AM, Root, Paul T <Paul.Root at centurylink.com<mailto:Paul.Root at centurylink.com>> wrote: So really dumb question here. Did you restart apache after removing 4.3.17 and installing 4.3.20? Yep, few times. From: Xymon [mailto:xymon-bounces at xymon.com<mailto:xymon-bounces at xymon.com>] On Behalf Of Asif Iqbal Sent: Thursday, May 21, 2015 9:47 AM To: J.C. Cleaver Cc: Xymon Mailing List; Cortes, Manny Subject: Re: [Xymon] Need help with upgrade from 4.3.17 to 4.3.20 On Wed, May 20, 2015 at 10:36 PM, J.C. Cleaver <cleaver at terabithia.org<mailto:cleaver at terabithia.org>> wrote: On Wed, May 20, 2015 8:10 am, Asif Iqbal wrote:
On Tue, May 19, 2015 at 6:39 PM, J.C. Cleaver <cleaver at terabithia.org<mailto:cleaver at terabithia.org>> wrote:
On Tue, May 19, 2015 12:04 pm, Asif Iqbal wrote:
On Tue, May 19, 2015 at 2:06 PM, J.C. Cleaver <cleaver at terabithia.org<mailto:cleaver at terabithia.org>> wrote:
Hmm. So far, the only way I've been able to reproduce this is by replacing the ScriptAlias directives with mere Alias's in the xymon.conf apache config.
I am using the config, as is, that came as xymon-apache.conf with the source 4.3.20
Has there been any change in the path you've used for the CGI directory since the previous version, or is there any chance that another Alias line
xymon and xymon-client debian version 4.3.17 has been removed, so no more xymon in /usr/lib/xymon
On Tue, May 19, 2015 10:37 am, Cortes, Manny wrote:
Having the same problem after installing 4.3.20 on both Ubuntu server 14.04 and 15.04.
Thanks,
Can you send a copy of the previous and current xymon.conf configs?
Here is the current config
/etc/apache2/sites-enabled$ egrep -v "^$|^#" xymon-apache.conf
Alias /xymon/ "/var/lib/xymon/server/www/" <Directory "/var/lib/xymon/server/www"> Options Indexes FollowSymLinks Includes MultiViews <IfModule mod_authz_core.c> # Apache 2.4+ Require all granted </IfModule> <IfModule !mod_authz_core.c> Order deny,allow Allow from all </IfModule> </Directory> ScriptAlias /xymon-cgi/ "/var/lib/xymon/cgi-bin/" <Directory "/var/lib/xymon/cgi-bin"> AllowOverride None Options ExecCGI FollowSymLinks Includes <IfModule mod_authz_core.c> # Apache 2.4+ Require all granted </IfModule> <IfModule !mod_authz_core.c> Order deny,allow Allow from all </IfModule> </Directory> ScriptAlias /xymon-seccgi/ "/var/lib/xymon/cgi-secure/" <Directory "/var/lib/xymon/cgi-secure"> AllowOverride None Options ExecCGI FollowSymLinks Includes <IfModule mod_authz_core.c> # Apache 2.4+ Require all granted </IfModule> <IfModule !mod_authz_core.c> Order deny,allow Allow from all </IfModule> # Password file where users with access to these scripts are kept. # Create it with "htpasswd -c /var/lib/xymon/server/etc/xymonpasswd USERNAME" # Add more users / change passwords with "htpasswd /var/lib/xymon/server/etc/xymonpasswd USERNAME" # # You can also use a group file to restrict admin access to members of a # group, instead of anyone who is logged in. In that case you must setup # the "xymongroups" file, and change the "Require" settings to require # a specific group membership. See the Apache docs for more details. AuthUserFile /var/lib/xymon/server/etc/xymonpasswd AuthGroupFile /var/lib/xymon/server/etc/xymongroups AuthType Basic AuthName "Xymon Administration" # "valid-user" restricts access to anyone who is logged in. Require valid-user # "group admins" restricts access to users who have logged in, AND # are members of the "admins" group in xymongroups. # Require group admins </Directory> RewriteEngine On RewriteRule ^/xymon/bb.html /xymon/xymon.html [R=permanent,L] RewriteRule ^/xymon/bb2.html /xymon/nongreen.html [R=permanent,L] RewriteRule ^/xymon/bbnk.html /xymon/critical.html [R=permanent,L] RewriteRule ^/xymon-cgi/bb-hist.sh /xymon-cgi/history.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-eventlog.sh /xymon-cgi/eventlog.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-rep.sh /xymon-cgi/report.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-replog.sh /xymon-cgi/reportlog.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-snapshot.sh /xymon-cgi/snapshot.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-findhost.sh /xymon-cgi/findhost.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-csvinfo.sh /xymon-cgi/csvinfo.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbitcolumn.sh /xymon-cgi/columndoc.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-datepage.sh /xymon-cgi/datepage.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbitgraph.sh /xymon-cgi/showgraph.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-hostsvc.sh /xymon-cgi/svcstatus.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-histlog.sh /xymon-cgi/historylog.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-confreport.sh /xymon-cgi/confreport.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-confreport-critical.sh /xymon-cgi/confreport-critical.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-nkview.sh /xymon-cgi/criticalview.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-certreport.sh /xymon-cgi/certreport.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-nongreen.sh /xymon-cgi/nongreen.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-hostgraphs.sh /xymon-cgi/hostgraphs.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-ghosts.sh /xymon-cgi/ghostlist.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-notifylog.sh /xymon-cgi/notifications.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-hostlist.sh /xymon-cgi/hostlist.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-perfdata.sh /xymon-cgi/perfdata.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-topchanges.sh /xymon-cgi/topchanges.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/bb-ack.sh /xymon-seccgi/acknowledge.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/hobbit-enadis.sh /xymon-seccgi/enadis.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/hobbit-nkedit.sh /xymon-seccgi/criticaleditor.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/hobbit-ackinfo.sh /xymon-seccgi/ackinfo.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/hobbit-useradm.sh /xymon-seccgi/useradm.sh [R=permanent,L]
I do not have any old config as I removed the old install
I'm really not sure what to make of this. Everything in the apache config looks to be correct; I can't see at all why apache would fail to execute the CGI vs simply sending you the file. Can you try two experiments? First, replace one of the .sh files with a symlink (instead of a hard link) to the cgiwrap binary. I'd like to see if we can rule out the hardlink itself being the problem. I did that and still seeing the same garbage when click a column /var/lib/xymon/cgi-bin$ ls -al svcstatus.sh lrwxrwxrwx 1 root root 21 May 21 10:29 svcstatus.sh -> ../server/bin/cgiwrap So that did not make any difference Second, can you compare to the xymon-apache.conf with the xymon-apache-secure.conf.DIST file in the build directory to see if there were any unexpected changes? I see the two files look identical. The conf file was not under build dir. $ diff -u /etc/apache2/sites-enabled/xymon-apache.conf xymon-4.3.20/xymond/etcfiles/xymon-apache-secure.DIST --- /etc/apache2/sites-enabled/xymon-apache.conf 2015-05-21 10:25:08.174803811 -0400 +++ xymon-4.3.20/xymond/etcfiles/xymon-apache-secure.DIST 2015-03-13 02:15:38.000000000 -0400 @@ -2,17 +2,17 @@ # # Add this to your Apache configuration, it makes # the Xymon webpages and cgi-scripts available in the -# "/xymon" and "/xymon-cgi" URLs. +# "@XYMONHOSTURL@" and "@XYMONCGIURL@" URLs. # NB: The "Alias" line below must NOT be used if you have # the Xymon webfiles as the root URL. In that case, # you should instead set this: # -# DocumentRoot /var/lib/xymon/server/www +# DocumentRoot @INSTALLWWWDIR@ -Alias /xymon/ "/var/lib/xymon/server/www/" -<Directory "/var/lib/xymon/server/www"> +Alias @XYMONHOSTURL@/ "@INSTALLWWWDIR@/" +<Directory "@INSTALLWWWDIR@"> Options Indexes FollowSymLinks Includes MultiViews <IfModule mod_authz_core.c> # Apache 2.4+ @@ -24,9 +24,8 @@ </IfModule> </Directory> -ScriptAlias /xymon-cgi/ "/var/lib/xymon/cgi-bin/" -<Directory "/var/lib/xymon/cgi-bin"> -SetHandler cgi-script +ScriptAlias @XYMONCGIURL@/ "@CGIDIR@/" +<Directory "@CGIDIR@"> AllowOverride None Options ExecCGI FollowSymLinks Includes <IfModule mod_authz_core.c> @@ -39,9 +38,8 @@ </IfModule> </Directory> -ScriptAlias /xymon-seccgi/ "/var/lib/xymon/cgi-secure/" -<Directory "/var/lib/xymon/cgi-secure"> -SetHandler cgi-script +ScriptAlias @SECUREXYMONCGIURL@/ "@SECURECGIDIR@/" +<Directory "@SECURECGIDIR@"> AllowOverride None Options ExecCGI FollowSymLinks Includes <IfModule mod_authz_core.c> @@ -54,16 +52,16 @@ </IfModule> # Password file where users with access to these scripts are kept. - # Create it with "htpasswd -c /var/lib/xymon/server/etc/xymonpasswd USERNAME" - # Add more users / change passwords with "htpasswd /var/lib/xymon/server/etc/xymonpasswd USERNAME" + # Create it with "htpasswd -c @INSTALLETCDIR@/xymonpasswd USERNAME" + # Add more users / change passwords with "htpasswd @INSTALLETCDIR@/xymonpasswd USERNAME" # # You can also use a group file to restrict admin access to members of a # group, instead of anyone who is logged in. In that case you must setup # the "xymongroups" file, and change the "Require" settings to require # a specific group membership. See the Apache docs for more details. - AuthUserFile /var/lib/xymon/server/etc/xymonpasswd - AuthGroupFile /var/lib/xymon/server/etc/xymongroups + AuthUserFile @INSTALLETCDIR@/xymonpasswd + AuthGroupFile @INSTALLETCDIR@/xymongroups AuthType Basic AuthName "Xymon Administration" @@ -79,37 +77,37 @@ # Rewrite-rules for migrating from the URL's used in Hobbit RewriteEngine On -RewriteRule ^/xymon/bb.html /xymon/xymon.html [R=permanent,L] -RewriteRule ^/xymon/bb2.html /xymon/nongreen.html [R=permanent,L] -RewriteRule ^/xymon/bbnk.html /xymon/critical.html [R=permanent,L] - -RewriteRule ^/xymon-cgi/bb-hist.sh /xymon-cgi/history.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-eventlog.sh /xymon-cgi/eventlog.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-rep.sh /xymon-cgi/report.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-replog.sh /xymon-cgi/reportlog.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-snapshot.sh /xymon-cgi/snapshot.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-findhost.sh /xymon-cgi/findhost.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-csvinfo.sh /xymon-cgi/csvinfo.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbitcolumn.sh /xymon-cgi/columndoc.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-datepage.sh /xymon-cgi/datepage.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbitgraph.sh /xymon-cgi/showgraph.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-hostsvc.sh /xymon-cgi/svcstatus.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-histlog.sh /xymon-cgi/historylog.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-confreport.sh /xymon-cgi/confreport.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-confreport-critical.sh /xymon-cgi/confreport-critical.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-nkview.sh /xymon-cgi/criticalview.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-certreport.sh /xymon-cgi/certreport.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-nongreen.sh /xymon-cgi/nongreen.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-hostgraphs.sh /xymon-cgi/hostgraphs.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-ghosts.sh /xymon-cgi/ghostlist.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-notifylog.sh /xymon-cgi/notifications.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-hostlist.sh /xymon-cgi/hostlist.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-perfdata.sh /xymon-cgi/perfdata.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-topchanges.sh /xymon-cgi/topchanges.sh [R=permanent,L] - -RewriteRule ^/xymon-seccgi/bb-ack.sh /xymon-seccgi/acknowledge.sh [R=permanent,L] -RewriteRule ^/xymon-seccgi/hobbit-enadis.sh /xymon-seccgi/enadis.sh [R=permanent,L] -RewriteRule ^/xymon-seccgi/hobbit-nkedit.sh /xymon-seccgi/criticaleditor.sh [R=permanent,L] -RewriteRule ^/xymon-seccgi/hobbit-ackinfo.sh /xymon-seccgi/ackinfo.sh [R=permanent,L] -RewriteRule ^/xymon-seccgi/hobbit-useradm.sh /xymon-seccgi/useradm.sh [R=permanent,L] +RewriteRule ^@XYMONHOSTURL@/bb.html<mailto:%5e at XYMONHOSTURL@/bb.html> @XYMONHOSTURL@/xymon.html [R=permanent,L] +RewriteRule ^@XYMONHOSTURL@/bb2.html<mailto:%5e at XYMONHOSTURL@/bb2.html> @XYMONHOSTURL@/nongreen.html [R=permanent,L] +RewriteRule ^@XYMONHOSTURL@/bbnk.html<mailto:%5e at XYMONHOSTURL@/bbnk.html> @XYMONHOSTURL@/critical.html [R=permanent,L] + +RewriteRule ^@XYMONCGIURL@/bb-hist.sh<mailto:%5e at XYMONCGIURL@/bb-hist.sh> @XYMONCGIURL@/history.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-eventlog.sh<mailto:%5e at XYMONCGIURL@/bb-eventlog.sh> @XYMONCGIURL@/eventlog.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-rep.sh<mailto:%5e at XYMONCGIURL@/bb-rep.sh> @XYMONCGIURL@/report.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-replog.sh<mailto:%5e at XYMONCGIURL@/bb-replog.sh> @XYMONCGIURL@/reportlog.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-snapshot.sh<mailto:%5e at XYMONCGIURL@/bb-snapshot.sh> @XYMONCGIURL@/snapshot.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-findhost.sh<mailto:%5e at XYMONCGIURL@/bb-findhost.sh> @XYMONCGIURL@/findhost.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-csvinfo.sh<mailto:%5e at XYMONCGIURL@/bb-csvinfo.sh> @XYMONCGIURL@/csvinfo.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbitcolumn.sh<mailto:%5e at XYMONCGIURL@/hobbitcolumn.sh> @XYMONCGIURL@/columndoc.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-datepage.sh<mailto:%5e at XYMONCGIURL@/bb-datepage.sh> @XYMONCGIURL@/datepage.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbitgraph.sh<mailto:%5e at XYMONCGIURL@/hobbitgraph.sh> @XYMONCGIURL@/showgraph.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-hostsvc.sh<mailto:%5e at XYMONCGIURL@/bb-hostsvc.sh> @XYMONCGIURL@/svcstatus.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-histlog.sh<mailto:%5e at XYMONCGIURL@/bb-histlog.sh> @XYMONCGIURL@/historylog.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-confreport.sh<mailto:%5e at XYMONCGIURL@/hobbit-confreport.sh> @XYMONCGIURL@/confreport.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-confreport-critical.sh<mailto:%5e at XYMONCGIURL@/hobbit-confreport-critical.sh> @XYMONCGIURL@/confreport-critical.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-nkview.sh<mailto:%5e at XYMONCGIURL@/hobbit-nkview.sh> @XYMONCGIURL@/criticalview.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-certreport.sh<mailto:%5e at XYMONCGIURL@/hobbit-certreport.sh> @XYMONCGIURL@/certreport.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-nongreen.sh<mailto:%5e at XYMONCGIURL@/hobbit-nongreen.sh> @XYMONCGIURL@/nongreen.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-hostgraphs.sh<mailto:%5e at XYMONCGIURL@/hobbit-hostgraphs.sh> @XYMONCGIURL@/hostgraphs.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-ghosts.sh<mailto:%5e at XYMONCGIURL@/hobbit-ghosts.sh> @XYMONCGIURL@/ghostlist.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-notifylog.sh<mailto:%5e at XYMONCGIURL@/hobbit-notifylog.sh> @XYMONCGIURL@/notifications.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-hostlist.sh<mailto:%5e at XYMONCGIURL@/hobbit-hostlist.sh> @XYMONCGIURL@/hostlist.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-perfdata.sh<mailto:%5e at XYMONCGIURL@/hobbit-perfdata.sh> @XYMONCGIURL@/perfdata.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-topchanges.sh<mailto:%5e at XYMONCGIURL@/hobbit-topchanges.sh> @XYMONCGIURL@/topchanges.sh [R=permanent,L] + +RewriteRule ^@SECUREXYMONCGIURL@/bb-ack.sh<mailto:%5e at SECUREXYMONCGIURL@/bb-ack.sh> @SECUREXYMONCGIURL@/acknowledge.sh [R=permanent,L] +RewriteRule ^@SECUREXYMONCGIURL@/hobbit-enadis.sh<mailto:%5e at SECUREXYMONCGIURL@/hobbit-enadis.sh> @SECUREXYMONCGIURL@/enadis.sh [R=permanent,L] +RewriteRule ^@SECUREXYMONCGIURL@/hobbit-nkedit.sh<mailto:%5e at SECUREXYMONCGIURL@/hobbit-nkedit.sh> @SECUREXYMONCGIURL@/criticaleditor.sh [R=permanent,L] +RewriteRule ^@SECUREXYMONCGIURL@/hobbit-ackinfo.sh<mailto:%5e at SECUREXYMONCGIURL@/hobbit-ackinfo.sh> @SECUREXYMONCGIURL@/ackinfo.sh [R=permanent,L] +RewriteRule ^@SECUREXYMONCGIURL@/hobbit-useradm.sh<mailto:%5e at SECUREXYMONCGIURL@/hobbit-useradm.sh> @SECUREXYMONCGIURL@/useradm.sh [R=permanent,L] Are there any other files in apache's /conf.d/ directory that might be taking precedence here? Here are the conf files that are active /etc/apache2/conf-enabled$ ls -al total 8 drwxr-xr-x 2 root root 4096 May 19 10:27 . drwxr-xr-x 8 root root 4096 May 19 10:12 .. lrwxrwxrwx 1 root root 34 May 19 10:14 apache2-doc.conf -> ../conf-available/apache2-doc.conf lrwxrwxrwx 1 root root 30 May 19 10:12 charset.conf -> ../conf-available/charset.conf lrwxrwxrwx 1 root root 44 May 19 10:12 localized-error-pages.conf -> ../conf-available/localized-error-pages.conf lrwxrwxrwx 1 root root 46 May 19 10:12 other-vhosts-access-log.conf -> ../conf-available/other-vhosts-access-log.conf lrwxrwxrwx 1 root root 31 May 19 10:12 security.conf -> ../conf-available/security.conf lrwxrwxrwx 1 root root 36 May 19 10:12 serve-cgi-bin.conf -> ../conf-available/serve-cgi-bin.conf /etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" apache2-doc.conf Alias /manual /usr/share/doc/apache2-doc/manual/ <Directory "/usr/share/doc/apache2-doc/manual/"> Options Indexes FollowSymlinks AllowOverride None Require all granted AddDefaultCharset off </Directory> /etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" charset.conf /etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" localized-error-pages.conf /etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" other-vhosts-access-log.conf CustomLog ${APACHE_LOG_DIR}/other_vhosts_access.log vhost_combined /etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" security.conf ServerTokens OS ServerSignature On TraceEnable Off /etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" serve-cgi-bin.conf <IfModule mod_alias.c> <IfModule mod_cgi.c> Define ENABLE_USR_LIB_CGI_BIN </IfModule> <IfModule mod_cgid.c> Define ENABLE_USR_LIB_CGI_BIN </IfModule> <IfDefine ENABLE_USR_LIB_CGI_BIN> ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/ <Directory "/usr/lib/cgi-bin"> AllowOverride None Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch Require all granted </Directory> </IfDefine> </IfModule> /etc/apache2/conf-enabled$ -jc -- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu<http://pgp.mit.edu> A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments. -- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu<http://pgp.mit.edu> A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? ________________________________ This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy. Your privacy is important to us. Accenture uses your personal data only in compliance with data protection laws. For further information on how Accenture processes your personal data, please see our privacy statement at https://www.accenture.com/us-en/privacy-policy. ______________________________________________________________________________________ www.accenture.com
Is that the only script in cgi-bin doing that? What about the secure cgi bin scripts? That appears to be an apache config problem with how ExecCGI is configured with your path. On Thu, Jul 12, 2018 at 4:53 PM Rothlisberger, John R. < john.r.rothlisberger at accenture.com> wrote:
I know this is an old issue but the only thing I could find that matches my current problem.
We just built a new Ubuntu 18.04 server with Xymon server 4.3.28 and ghostlist.sh and acknowledge.sh show garbage instead of working properly. Most other scripts in the cgi-bin directory seem to work ok and I even created a test python script that worked in the cgi-bin directory. I have run a clean make/install on the Xymon server and still have this problem.
Anyone have any ideas? This is what I get when I go to ghostlist.sh (same as original poster):
ELF[1]��������� ------------------------------ �>���� <������@�������(% ------------------------------ ���������@�8� �@�%�$� ��� ------------------------------ ���@�������@�������@�������ø������ø������ ������� ------------------------------ ��� ------------------------------ ���8[1]������8[1]������8[1]������ ������� ����������������� ���������������������������(þ������(þ�������� �������� ���ð[1]�����ð[1]! �����ð[1]!�����œ
������ÐI�������� �����[1]��� ��� ����� !����� !
Thanks,
John
*From:* Xymon [mailto:xymon-bounces at xymon.com] *On Behalf Of *Asif Iqbal *Sent:* Thursday, May 21, 2015 10:20 AM *To:* Root, Paul T <Paul.Root at centurylink.com> *Cc:* Xymon Mailing List <xymon at xymon.com>; Cortes, Manny < Manuel.Cortes at orlandohealth.com> *Subject:* Re: [Xymon] Need help with upgrade from 4.3.17 to 4.3.20
On Thu, May 21, 2015 at 10:51 AM, Root, Paul T <Paul.Root at centurylink.com> wrote:
So really dumb question here. Did you restart apache after removing 4.3.17 and installing 4.3.20?
Yep, few times.
*From:* Xymon [mailto:xymon-bounces at xymon.com] *On Behalf Of *Asif Iqbal *Sent:* Thursday, May 21, 2015 9:47 AM *To:* J.C. Cleaver *Cc:* Xymon Mailing List; Cortes, Manny *Subject:* Re: [Xymon] Need help with upgrade from 4.3.17 to 4.3.20
On Wed, May 20, 2015 at 10:36 PM, J.C. Cleaver <cleaver at terabithia.org> wrote:
On Wed, May 20, 2015 8:10 am, Asif Iqbal wrote:
On Tue, May 19, 2015 at 6:39 PM, J.C. Cleaver <cleaver at terabithia.org> wrote:
On Tue, May 19, 2015 12:04 pm, Asif Iqbal wrote:
On Tue, May 19, 2015 at 2:06 PM, J.C. Cleaver <cleaver at terabithia.org
wrote:
Hmm. So far, the only way I've been able to reproduce this is by replacing the ScriptAlias directives with mere Alias's in the xymon.conf apache config.
I am using the config, as is, that came as xymon-apache.conf with the source 4.3.20
Has there been any change in the path you've used for the CGI directory since the previous version, or is there any chance that another Alias line
xymon and xymon-client debian version 4.3.17 has been removed, so no more xymon in /usr/lib/xymon
On Tue, May 19, 2015 10:37 am, Cortes, Manny wrote:
Having the same problem after installing 4.3.20 on both Ubuntu server 14.04 and 15.04.
Thanks,
Can you send a copy of the previous and current xymon.conf configs?
Here is the current config
/etc/apache2/sites-enabled$ egrep -v "^$|^#" xymon-apache.conf
Alias /xymon/ "/var/lib/xymon/server/www/" <Directory "/var/lib/xymon/server/www"> Options Indexes FollowSymLinks Includes MultiViews <IfModule mod_authz_core.c> # Apache 2.4+ Require all granted </IfModule> <IfModule !mod_authz_core.c> Order deny,allow Allow from all </IfModule> </Directory> ScriptAlias /xymon-cgi/ "/var/lib/xymon/cgi-bin/" <Directory "/var/lib/xymon/cgi-bin"> AllowOverride None Options ExecCGI FollowSymLinks Includes <IfModule mod_authz_core.c> # Apache 2.4+ Require all granted </IfModule> <IfModule !mod_authz_core.c> Order deny,allow Allow from all </IfModule> </Directory> ScriptAlias /xymon-seccgi/ "/var/lib/xymon/cgi-secure/" <Directory "/var/lib/xymon/cgi-secure"> AllowOverride None Options ExecCGI FollowSymLinks Includes <IfModule mod_authz_core.c> # Apache 2.4+ Require all granted </IfModule> <IfModule !mod_authz_core.c> Order deny,allow Allow from all </IfModule> # Password file where users with access to these scripts are kept. # Create it with "htpasswd -c /var/lib/xymon/server/etc/xymonpasswd USERNAME" # Add more users / change passwords with "htpasswd /var/lib/xymon/server/etc/xymonpasswd USERNAME" # # You can also use a group file to restrict admin access to members of a # group, instead of anyone who is logged in. In that case you must setup # the "xymongroups" file, and change the "Require" settings to require # a specific group membership. See the Apache docs for more details. AuthUserFile /var/lib/xymon/server/etc/xymonpasswd AuthGroupFile /var/lib/xymon/server/etc/xymongroups AuthType Basic AuthName "Xymon Administration" # "valid-user" restricts access to anyone who is logged in. Require valid-user # "group admins" restricts access to users who have logged in, AND # are members of the "admins" group in xymongroups. # Require group admins </Directory> RewriteEngine On RewriteRule ^/xymon/bb.html /xymon/xymon.html [R=permanent,L] RewriteRule ^/xymon/bb2.html /xymon/nongreen.html [R=permanent,L] RewriteRule ^/xymon/bbnk.html /xymon/critical.html [R=permanent,L] RewriteRule ^/xymon-cgi/bb-hist.sh /xymon-cgi/history.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-eventlog.sh /xymon-cgi/eventlog.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-rep.sh /xymon-cgi/report.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-replog.sh /xymon-cgi/reportlog.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-snapshot.sh /xymon-cgi/snapshot.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-findhost.sh /xymon-cgi/findhost.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-csvinfo.sh /xymon-cgi/csvinfo.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbitcolumn.sh /xymon-cgi/columndoc.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-datepage.sh /xymon-cgi/datepage.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbitgraph.sh /xymon-cgi/showgraph.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-hostsvc.sh /xymon-cgi/svcstatus.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-histlog.sh /xymon-cgi/historylog.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-confreport.sh /xymon-cgi/confreport.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-confreport-critical.sh /xymon-cgi/confreport-critical.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-nkview.sh /xymon-cgi/criticalview.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-certreport.sh /xymon-cgi/certreport.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-nongreen.sh /xymon-cgi/nongreen.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-hostgraphs.sh /xymon-cgi/hostgraphs.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-ghosts.sh /xymon-cgi/ghostlist.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-notifylog.sh /xymon-cgi/notifications.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-hostlist.sh /xymon-cgi/hostlist.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-perfdata.sh /xymon-cgi/perfdata.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-topchanges.sh /xymon-cgi/topchanges.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/bb-ack.sh /xymon-seccgi/acknowledge.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/hobbit-enadis.sh /xymon-seccgi/enadis.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/hobbit-nkedit.sh /xymon-seccgi/criticaleditor.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/hobbit-ackinfo.sh /xymon-seccgi/ackinfo.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/hobbit-useradm.sh /xymon-seccgi/useradm.sh [R=permanent,L]
I do not have any old config as I removed the old install
I'm really not sure what to make of this. Everything in the apache config looks to be correct; I can't see at all why apache would fail to execute the CGI vs simply sending you the file.
Can you try two experiments?
First, replace one of the .sh files with a symlink (instead of a hard link) to the cgiwrap binary. I'd like to see if we can rule out the hardlink itself being the problem.
I did that and still seeing the same garbage when click a column
/var/lib/xymon/cgi-bin$ ls -al svcstatus.sh
lrwxrwxrwx 1 root root 21 May 21 10:29 svcstatus.sh -> ../server/bin/cgiwrap
So that did not make any difference
Second, can you compare to the xymon-apache.conf with the xymon-apache-secure.conf.DIST file in the build directory to see if there were any unexpected changes?
I see the two files look identical. The conf file was not under build dir.
$ diff -u /etc/apache2/sites-enabled/xymon-apache.conf xymon-4.3.20/xymond/etcfiles/xymon-apache-secure.DIST
--- /etc/apache2/sites-enabled/xymon-apache.conf 2015-05-21 10:25:08.174803811 -0400
+++ xymon-4.3.20/xymond/etcfiles/xymon-apache-secure.DIST 2015-03-13 02:15:38.000000000 -0400
@@ -2,17 +2,17 @@
#
# Add this to your Apache configuration, it makes
# the Xymon webpages and cgi-scripts available in the
-# "/xymon" and "/xymon-cgi" URLs.
+# "@XYMONHOSTURL@" and "@XYMONCGIURL@" URLs.
# NB: The "Alias" line below must NOT be used if you have
# the Xymon webfiles as the root URL. In that case,
# you should instead set this:
#
-# DocumentRoot /var/lib/xymon/server/www
+# DocumentRoot @INSTALLWWWDIR@
-Alias /xymon/ "/var/lib/xymon/server/www/"
-<Directory "/var/lib/xymon/server/www">
+Alias @XYMONHOSTURL@/ "@INSTALLWWWDIR@/"
+<Directory "@INSTALLWWWDIR@">
Options Indexes FollowSymLinks Includes MultiViews
<IfModule mod_authz_core.c>
# Apache 2.4+
@@ -24,9 +24,8 @@
</IfModule>
</Directory>
-ScriptAlias /xymon-cgi/ "/var/lib/xymon/cgi-bin/"
-<Directory "/var/lib/xymon/cgi-bin">
-SetHandler cgi-script
+ScriptAlias @XYMONCGIURL@/ "@CGIDIR@/"
+<Directory "@CGIDIR@">
AllowOverride None
Options ExecCGI FollowSymLinks Includes
<IfModule mod_authz_core.c>
@@ -39,9 +38,8 @@
</IfModule>
</Directory>
-ScriptAlias /xymon-seccgi/ "/var/lib/xymon/cgi-secure/"
-<Directory "/var/lib/xymon/cgi-secure">
-SetHandler cgi-script
+ScriptAlias @SECUREXYMONCGIURL@/ "@SECURECGIDIR@/"
+<Directory "@SECURECGIDIR@">
AllowOverride None
Options ExecCGI FollowSymLinks Includes
<IfModule mod_authz_core.c>
@@ -54,16 +52,16 @@
</IfModule>
# Password file where users with access to these scripts are kept.
- # Create it with "htpasswd -c /var/lib/xymon/server/etc/xymonpasswd USERNAME"
- # Add more users / change passwords with "htpasswd /var/lib/xymon/server/etc/xymonpasswd USERNAME"
+ # Create it with "htpasswd -c @INSTALLETCDIR@/xymonpasswd USERNAME"
+ # Add more users / change passwords with "htpasswd @INSTALLETCDIR@/xymonpasswd USERNAME"
#
# You can also use a group file to restrict admin access to members of a
# group, instead of anyone who is logged in. In that case you must setup
# the "xymongroups" file, and change the "Require" settings to require
# a specific group membership. See the Apache docs for more details.
- AuthUserFile /var/lib/xymon/server/etc/xymonpasswd
- AuthGroupFile /var/lib/xymon/server/etc/xymongroups
+ AuthUserFile @INSTALLETCDIR@/xymonpasswd
+ AuthGroupFile @INSTALLETCDIR@/xymongroups
AuthType Basic
AuthName "Xymon Administration"
@@ -79,37 +77,37 @@
# Rewrite-rules for migrating from the URL's used in Hobbit
RewriteEngine On
-RewriteRule ^/xymon/bb.html /xymon/xymon.html [R=permanent,L]
-RewriteRule ^/xymon/bb2.html /xymon/nongreen.html [R=permanent,L]
-RewriteRule ^/xymon/bbnk.html /xymon/critical.html [R=permanent,L]
-
-RewriteRule ^/xymon-cgi/bb-hist.sh /xymon-cgi/history.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/bb-eventlog.sh /xymon-cgi/eventlog.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/bb-rep.sh /xymon-cgi/report.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/bb-replog.sh /xymon-cgi/reportlog.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/bb-snapshot.sh /xymon-cgi/snapshot.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/bb-findhost.sh /xymon-cgi/findhost.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/bb-csvinfo.sh /xymon-cgi/csvinfo.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/hobbitcolumn.sh /xymon-cgi/columndoc.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/bb-datepage.sh /xymon-cgi/datepage.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/hobbitgraph.sh /xymon-cgi/showgraph.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/bb-hostsvc.sh /xymon-cgi/svcstatus.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/bb-histlog.sh /xymon-cgi/historylog.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/hobbit-confreport.sh /xymon-cgi/confreport.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/hobbit-confreport-critical.sh /xymon-cgi/confreport-critical.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/hobbit-nkview.sh /xymon-cgi/criticalview.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/hobbit-certreport.sh /xymon-cgi/certreport.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/hobbit-nongreen.sh /xymon-cgi/nongreen.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/hobbit-hostgraphs.sh /xymon-cgi/hostgraphs.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/hobbit-ghosts.sh /xymon-cgi/ghostlist.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/hobbit-notifylog.sh /xymon-cgi/notifications.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/hobbit-hostlist.sh /xymon-cgi/hostlist.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/hobbit-perfdata.sh /xymon-cgi/perfdata.sh [R=permanent,L]
-RewriteRule ^/xymon-cgi/hobbit-topchanges.sh /xymon-cgi/topchanges.sh [R=permanent,L]
-
-RewriteRule ^/xymon-seccgi/bb-ack.sh /xymon-seccgi/acknowledge.sh [R=permanent,L]
-RewriteRule ^/xymon-seccgi/hobbit-enadis.sh /xymon-seccgi/enadis.sh [R=permanent,L]
-RewriteRule ^/xymon-seccgi/hobbit-nkedit.sh /xymon-seccgi/criticaleditor.sh [R=permanent,L]
-RewriteRule ^/xymon-seccgi/hobbit-ackinfo.sh /xymon-seccgi/ackinfo.sh [R=permanent,L]
-RewriteRule ^/xymon-seccgi/hobbit-useradm.sh /xymon-seccgi/useradm.sh [R=permanent,L]
+RewriteRule ^@XYMONHOSTURL@/bb.html @XYMONHOSTURL@/xymon.html [R=permanent,L]
+RewriteRule ^@XYMONHOSTURL@/bb2.html @XYMONHOSTURL@/nongreen.html [R=permanent,L]
+RewriteRule ^@XYMONHOSTURL@/bbnk.html @XYMONHOSTURL@/critical.html [R=permanent,L]
+
+RewriteRule ^@XYMONCGIURL@/bb-hist.sh @XYMONCGIURL@/history.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/bb-eventlog.sh @XYMONCGIURL@/eventlog.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/bb-rep.sh @XYMONCGIURL@/report.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/bb-replog.sh @XYMONCGIURL@/reportlog.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/bb-snapshot.sh @XYMONCGIURL@/snapshot.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/bb-findhost.sh @XYMONCGIURL@/findhost.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/bb-csvinfo.sh @XYMONCGIURL@/csvinfo.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/hobbitcolumn.sh @XYMONCGIURL@/columndoc.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/bb-datepage.sh @XYMONCGIURL@/datepage.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/hobbitgraph.sh @XYMONCGIURL@/showgraph.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/bb-hostsvc.sh @XYMONCGIURL@/svcstatus.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/bb-histlog.sh @XYMONCGIURL@/historylog.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/hobbit-confreport.sh @XYMONCGIURL@/confreport.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/hobbit-confreport-critical.sh @XYMONCGIURL@/confreport-critical.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/hobbit-nkview.sh @XYMONCGIURL@/criticalview.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/hobbit-certreport.sh @XYMONCGIURL@/certreport.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/hobbit-nongreen.sh @XYMONCGIURL@/nongreen.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/hobbit-hostgraphs.sh @XYMONCGIURL@/hostgraphs.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/hobbit-ghosts.sh @XYMONCGIURL@/ghostlist.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/hobbit-notifylog.sh @XYMONCGIURL@/notifications.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/hobbit-hostlist.sh @XYMONCGIURL@/hostlist.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/hobbit-perfdata.sh @XYMONCGIURL@/perfdata.sh [R=permanent,L]
+RewriteRule ^@XYMONCGIURL@/hobbit-topchanges.sh @XYMONCGIURL@/topchanges.sh [R=permanent,L]
+
+RewriteRule ^@SECUREXYMONCGIURL@/bb-ack.sh @SECUREXYMONCGIURL@/acknowledge.sh [R=permanent,L]
+RewriteRule ^@SECUREXYMONCGIURL@/hobbit-enadis.sh @SECUREXYMONCGIURL@/enadis.sh [R=permanent,L]
+RewriteRule ^@SECUREXYMONCGIURL@/hobbit-nkedit.sh @SECUREXYMONCGIURL@/criticaleditor.sh [R=permanent,L]
+RewriteRule ^@SECUREXYMONCGIURL@/hobbit-ackinfo.sh @SECUREXYMONCGIURL@/ackinfo.sh [R=permanent,L]
+RewriteRule ^@SECUREXYMONCGIURL@/hobbit-useradm.sh @SECUREXYMONCGIURL@/useradm.sh [R=permanent,L]
Are there any other files in apache's /conf.d/ directory that might be taking precedence here?
Here are the conf files that are active
/etc/apache2/conf-enabled$ ls -al
total 8
drwxr-xr-x 2 root root 4096 May 19 10:27 .
drwxr-xr-x 8 root root 4096 May 19 10:12 ..
lrwxrwxrwx 1 root root 34 May 19 10:14 apache2-doc.conf -> ../conf-available/apache2-doc.conf
lrwxrwxrwx 1 root root 30 May 19 10:12 charset.conf -> ../conf-available/charset.conf
lrwxrwxrwx 1 root root 44 May 19 10:12 localized-error-pages.conf -> ../conf-available/localized-error-pages.conf
lrwxrwxrwx 1 root root 46 May 19 10:12 other-vhosts-access-log.conf -> ../conf-available/other-vhosts-access-log.conf
lrwxrwxrwx 1 root root 31 May 19 10:12 security.conf -> ../conf-available/security.conf
lrwxrwxrwx 1 root root 36 May 19 10:12 serve-cgi-bin.conf -> ../conf-available/serve-cgi-bin.conf
/etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" apache2-doc.conf
Alias /manual /usr/share/doc/apache2-doc/manual/
<Directory "/usr/share/doc/apache2-doc/manual/">
Options Indexes FollowSymlinks
AllowOverride None
Require all granted
AddDefaultCharset off
</Directory>
/etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" charset.conf
/etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" localized-error-pages.conf
/etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" other-vhosts-access-log.conf
CustomLog ${APACHE_LOG_DIR}/other_vhosts_access.log vhost_combined
/etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" security.conf
ServerTokens OS
ServerSignature On
TraceEnable Off
/etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" serve-cgi-bin.conf
<IfModule mod_alias.c>
<IfModule mod_cgi.c>
Define ENABLE_USR_LIB_CGI_BIN
</IfModule>
<IfModule mod_cgid.c>
Define ENABLE_USR_LIB_CGI_BIN
</IfModule>
<IfDefine ENABLE_USR_LIB_CGI_BIN>
ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/
<Directory "/usr/lib/cgi-bin">
AllowOverride None
Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
Require all granted
</Directory>
</IfDefine>
</IfModule>
/etc/apache2/conf-enabled$
-jc
--
Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing?
This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.
--
Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing?
------------------------------
This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy. Your privacy is important to us. Accenture uses your personal data only in compliance with data protection laws. For further information on how Accenture processes your personal data, please see our privacy statement at https://www.accenture.com/us-en/privacy-policy.
______________________________________________________________________________________
www.accenture.com _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon
I thought it was also an apache config issue but I have not been able to identify it. I did create a test script and placed it in my cgi-bin directory and that test script works fine – along with most other scripts (top changes, config report, find host, etc). The 2 scripts that I see having an issue are ghostlist.sh & acknowledge.sh – these are both hardlinked to cgiwrap (along with others). Thanks, John From: Galen Johnson [mailto:solitaryr at gmail.com] Sent: Thursday, July 12, 2018 4:06 PM To: Rothlisberger, John R. <john.r.rothlisberger at accenture.com> Cc: xymon >> xymon at xymon.com <xymon at xymon.com> Subject: [External] Re: [Xymon] Need help with upgrade from 4.3.17 to 4.3.20 Is that the only script in cgi-bin doing that? What about the secure cgi bin scripts? That appears to be an apache config problem with how ExecCGI is configured with your path. On Thu, Jul 12, 2018 at 4:53 PM Rothlisberger, John R. <john.r.rothlisberger at accenture.com<mailto:john.r.rothlisberger at accenture.com>> wrote: I know this is an old issue but the only thing I could find that matches my current problem. We just built a new Ubuntu 18.04 server with Xymon server 4.3.28 and ghostlist.sh and acknowledge.sh show garbage instead of working properly. Most other scripts in the cgi-bin directory seem to work ok and I even created a test python script that worked in the cgi-bin directory. I have run a clean make/install on the Xymon server and still have this problem. Anyone have any ideas? This is what I get when I go to ghostlist.sh (same as original poster): ELF[1]��������� ________________________________ �>���� <������@�������(% ________________________________ ���������@�8� �@�%�$� ��� ________________________________ ���@�������@�������@�������ø������ø������ ������� ________________________________ ��� ________________________________ ���8[1]������8[1]������8[1]������ ������� ��������������������������������������������(þ������(þ�������� �������� ���ð[1]�����ð[1]!�����ð[1]!�����œ ������ÐI�������� �����[1]��� ��� ����� !����� ! Thanks, John From: Xymon [mailto:xymon-bounces at xymon.com<mailto:xymon-bounces at xymon.com>] On Behalf Of Asif Iqbal Sent: Thursday, May 21, 2015 10:20 AM To: Root, Paul T <Paul.Root at centurylink.com<mailto:Paul.Root at centurylink.com>> Cc: Xymon Mailing List <xymon at xymon.com<mailto:xymon at xymon.com>>; Cortes, Manny <Manuel.Cortes at orlandohealth.com<mailto:Manuel.Cortes at orlandohealth.com>> Subject: Re: [Xymon] Need help with upgrade from 4.3.17 to 4.3.20 On Thu, May 21, 2015 at 10:51 AM, Root, Paul T <Paul.Root at centurylink.com<mailto:Paul.Root at centurylink.com>> wrote: So really dumb question here. Did you restart apache after removing 4.3.17 and installing 4.3.20? Yep, few times. From: Xymon [mailto:xymon-bounces at xymon.com<mailto:xymon-bounces at xymon.com>] On Behalf Of Asif Iqbal Sent: Thursday, May 21, 2015 9:47 AM To: J.C. Cleaver Cc: Xymon Mailing List; Cortes, Manny Subject: Re: [Xymon] Need help with upgrade from 4.3.17 to 4.3.20 On Wed, May 20, 2015 at 10:36 PM, J.C. Cleaver <cleaver at terabithia.org<mailto:cleaver at terabithia.org>> wrote: On Wed, May 20, 2015 8:10 am, Asif Iqbal wrote:
On Tue, May 19, 2015 at 6:39 PM, J.C. Cleaver <cleaver at terabithia.org<mailto:cleaver at terabithia.org>> wrote:
On Tue, May 19, 2015 12:04 pm, Asif Iqbal wrote:
On Tue, May 19, 2015 at 2:06 PM, J.C. Cleaver <cleaver at terabithia.org<mailto:cleaver at terabithia.org>> wrote:
Hmm. So far, the only way I've been able to reproduce this is by replacing the ScriptAlias directives with mere Alias's in the xymon.conf apache config.
I am using the config, as is, that came as xymon-apache.conf with the source 4.3.20
Has there been any change in the path you've used for the CGI directory since the previous version, or is there any chance that another Alias line
xymon and xymon-client debian version 4.3.17 has been removed, so no more xymon in /usr/lib/xymon
On Tue, May 19, 2015 10:37 am, Cortes, Manny wrote:
Having the same problem after installing 4.3.20 on both Ubuntu server 14.04 and 15.04.
Thanks,
Can you send a copy of the previous and current xymon.conf configs?
Here is the current config
/etc/apache2/sites-enabled$ egrep -v "^$|^#" xymon-apache.conf
Alias /xymon/ "/var/lib/xymon/server/www/" <Directory "/var/lib/xymon/server/www"> Options Indexes FollowSymLinks Includes MultiViews <IfModule mod_authz_core.c> # Apache 2.4+ Require all granted </IfModule> <IfModule !mod_authz_core.c> Order deny,allow Allow from all </IfModule> </Directory> ScriptAlias /xymon-cgi/ "/var/lib/xymon/cgi-bin/" <Directory "/var/lib/xymon/cgi-bin"> AllowOverride None Options ExecCGI FollowSymLinks Includes <IfModule mod_authz_core.c> # Apache 2.4+ Require all granted </IfModule> <IfModule !mod_authz_core.c> Order deny,allow Allow from all </IfModule> </Directory> ScriptAlias /xymon-seccgi/ "/var/lib/xymon/cgi-secure/" <Directory "/var/lib/xymon/cgi-secure"> AllowOverride None Options ExecCGI FollowSymLinks Includes <IfModule mod_authz_core.c> # Apache 2.4+ Require all granted </IfModule> <IfModule !mod_authz_core.c> Order deny,allow Allow from all </IfModule> # Password file where users with access to these scripts are kept. # Create it with "htpasswd -c /var/lib/xymon/server/etc/xymonpasswd USERNAME" # Add more users / change passwords with "htpasswd /var/lib/xymon/server/etc/xymonpasswd USERNAME" # # You can also use a group file to restrict admin access to members of a # group, instead of anyone who is logged in. In that case you must setup # the "xymongroups" file, and change the "Require" settings to require # a specific group membership. See the Apache docs for more details. AuthUserFile /var/lib/xymon/server/etc/xymonpasswd AuthGroupFile /var/lib/xymon/server/etc/xymongroups AuthType Basic AuthName "Xymon Administration" # "valid-user" restricts access to anyone who is logged in. Require valid-user # "group admins" restricts access to users who have logged in, AND # are members of the "admins" group in xymongroups. # Require group admins </Directory> RewriteEngine On RewriteRule ^/xymon/bb.html /xymon/xymon.html [R=permanent,L] RewriteRule ^/xymon/bb2.html /xymon/nongreen.html [R=permanent,L] RewriteRule ^/xymon/bbnk.html /xymon/critical.html [R=permanent,L] RewriteRule ^/xymon-cgi/bb-hist.sh /xymon-cgi/history.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-eventlog.sh /xymon-cgi/eventlog.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-rep.sh /xymon-cgi/report.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-replog.sh /xymon-cgi/reportlog.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-snapshot.sh /xymon-cgi/snapshot.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-findhost.sh /xymon-cgi/findhost.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-csvinfo.sh /xymon-cgi/csvinfo.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbitcolumn.sh /xymon-cgi/columndoc.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-datepage.sh /xymon-cgi/datepage.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbitgraph.sh /xymon-cgi/showgraph.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-hostsvc.sh /xymon-cgi/svcstatus.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-histlog.sh /xymon-cgi/historylog.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-confreport.sh /xymon-cgi/confreport.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-confreport-critical.sh /xymon-cgi/confreport-critical.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-nkview.sh /xymon-cgi/criticalview.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-certreport.sh /xymon-cgi/certreport.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-nongreen.sh /xymon-cgi/nongreen.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-hostgraphs.sh /xymon-cgi/hostgraphs.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-ghosts.sh /xymon-cgi/ghostlist.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-notifylog.sh /xymon-cgi/notifications.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-hostlist.sh /xymon-cgi/hostlist.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-perfdata.sh /xymon-cgi/perfdata.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-topchanges.sh /xymon-cgi/topchanges.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/bb-ack.sh /xymon-seccgi/acknowledge.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/hobbit-enadis.sh /xymon-seccgi/enadis.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/hobbit-nkedit.sh /xymon-seccgi/criticaleditor.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/hobbit-ackinfo.sh /xymon-seccgi/ackinfo.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/hobbit-useradm.sh /xymon-seccgi/useradm.sh [R=permanent,L]
I do not have any old config as I removed the old install
I'm really not sure what to make of this. Everything in the apache config looks to be correct; I can't see at all why apache would fail to execute the CGI vs simply sending you the file. Can you try two experiments? First, replace one of the .sh files with a symlink (instead of a hard link) to the cgiwrap binary. I'd like to see if we can rule out the hardlink itself being the problem. I did that and still seeing the same garbage when click a column /var/lib/xymon/cgi-bin$ ls -al svcstatus.sh lrwxrwxrwx 1 root root 21 May 21 10:29 svcstatus.sh -> ../server/bin/cgiwrap So that did not make any difference Second, can you compare to the xymon-apache.conf with the xymon-apache-secure.conf.DIST file in the build directory to see if there were any unexpected changes? I see the two files look identical. The conf file was not under build dir. $ diff -u /etc/apache2/sites-enabled/xymon-apache.conf xymon-4.3.20/xymond/etcfiles/xymon-apache-secure.DIST --- /etc/apache2/sites-enabled/xymon-apache.conf 2015-05-21 10:25:08.174803811 -0400 +++ xymon-4.3.20/xymond/etcfiles/xymon-apache-secure.DIST 2015-03-13 02:15:38.000000000 -0400 @@ -2,17 +2,17 @@ # # Add this to your Apache configuration, it makes # the Xymon webpages and cgi-scripts available in the -# "/xymon" and "/xymon-cgi" URLs. +# "@XYMONHOSTURL@" and "@XYMONCGIURL@" URLs. # NB: The "Alias" line below must NOT be used if you have # the Xymon webfiles as the root URL. In that case, # you should instead set this: # -# DocumentRoot /var/lib/xymon/server/www +# DocumentRoot @INSTALLWWWDIR@ -Alias /xymon/ "/var/lib/xymon/server/www/" -<Directory "/var/lib/xymon/server/www"> +Alias @XYMONHOSTURL@/ "@INSTALLWWWDIR@/" +<Directory "@INSTALLWWWDIR@"> Options Indexes FollowSymLinks Includes MultiViews <IfModule mod_authz_core.c> # Apache 2.4+ @@ -24,9 +24,8 @@ </IfModule> </Directory> -ScriptAlias /xymon-cgi/ "/var/lib/xymon/cgi-bin/" -<Directory "/var/lib/xymon/cgi-bin"> -SetHandler cgi-script +ScriptAlias @XYMONCGIURL@/ "@CGIDIR@/" +<Directory "@CGIDIR@"> AllowOverride None Options ExecCGI FollowSymLinks Includes <IfModule mod_authz_core.c> @@ -39,9 +38,8 @@ </IfModule> </Directory> -ScriptAlias /xymon-seccgi/ "/var/lib/xymon/cgi-secure/" -<Directory "/var/lib/xymon/cgi-secure"> -SetHandler cgi-script +ScriptAlias @SECUREXYMONCGIURL@/ "@SECURECGIDIR@/" +<Directory "@SECURECGIDIR@"> AllowOverride None Options ExecCGI FollowSymLinks Includes <IfModule mod_authz_core.c> @@ -54,16 +52,16 @@ </IfModule> # Password file where users with access to these scripts are kept. - # Create it with "htpasswd -c /var/lib/xymon/server/etc/xymonpasswd USERNAME" - # Add more users / change passwords with "htpasswd /var/lib/xymon/server/etc/xymonpasswd USERNAME" + # Create it with "htpasswd -c @INSTALLETCDIR@/xymonpasswd USERNAME" + # Add more users / change passwords with "htpasswd @INSTALLETCDIR@/xymonpasswd USERNAME" # # You can also use a group file to restrict admin access to members of a # group, instead of anyone who is logged in. In that case you must setup # the "xymongroups" file, and change the "Require" settings to require # a specific group membership. See the Apache docs for more details. - AuthUserFile /var/lib/xymon/server/etc/xymonpasswd - AuthGroupFile /var/lib/xymon/server/etc/xymongroups + AuthUserFile @INSTALLETCDIR@/xymonpasswd + AuthGroupFile @INSTALLETCDIR@/xymongroups AuthType Basic AuthName "Xymon Administration" @@ -79,37 +77,37 @@ # Rewrite-rules for migrating from the URL's used in Hobbit RewriteEngine On -RewriteRule ^/xymon/bb.html /xymon/xymon.html [R=permanent,L] -RewriteRule ^/xymon/bb2.html /xymon/nongreen.html [R=permanent,L] -RewriteRule ^/xymon/bbnk.html /xymon/critical.html [R=permanent,L] - -RewriteRule ^/xymon-cgi/bb-hist.sh /xymon-cgi/history.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-eventlog.sh /xymon-cgi/eventlog.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-rep.sh /xymon-cgi/report.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-replog.sh /xymon-cgi/reportlog.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-snapshot.sh /xymon-cgi/snapshot.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-findhost.sh /xymon-cgi/findhost.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-csvinfo.sh /xymon-cgi/csvinfo.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbitcolumn.sh /xymon-cgi/columndoc.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-datepage.sh /xymon-cgi/datepage.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbitgraph.sh /xymon-cgi/showgraph.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-hostsvc.sh /xymon-cgi/svcstatus.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-histlog.sh /xymon-cgi/historylog.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-confreport.sh /xymon-cgi/confreport.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-confreport-critical.sh /xymon-cgi/confreport-critical.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-nkview.sh /xymon-cgi/criticalview.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-certreport.sh /xymon-cgi/certreport.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-nongreen.sh /xymon-cgi/nongreen.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-hostgraphs.sh /xymon-cgi/hostgraphs.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-ghosts.sh /xymon-cgi/ghostlist.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-notifylog.sh /xymon-cgi/notifications.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-hostlist.sh /xymon-cgi/hostlist.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-perfdata.sh /xymon-cgi/perfdata.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-topchanges.sh /xymon-cgi/topchanges.sh [R=permanent,L] - -RewriteRule ^/xymon-seccgi/bb-ack.sh /xymon-seccgi/acknowledge.sh [R=permanent,L] -RewriteRule ^/xymon-seccgi/hobbit-enadis.sh /xymon-seccgi/enadis.sh [R=permanent,L] -RewriteRule ^/xymon-seccgi/hobbit-nkedit.sh /xymon-seccgi/criticaleditor.sh [R=permanent,L] -RewriteRule ^/xymon-seccgi/hobbit-ackinfo.sh /xymon-seccgi/ackinfo.sh [R=permanent,L] -RewriteRule ^/xymon-seccgi/hobbit-useradm.sh /xymon-seccgi/useradm.sh [R=permanent,L] +RewriteRule ^@XYMONHOSTURL@/bb.html<mailto:%5e at XYMONHOSTURL@/bb.html> @XYMONHOSTURL@/xymon.html [R=permanent,L] +RewriteRule ^@XYMONHOSTURL@/bb2.html<mailto:%5e at XYMONHOSTURL@/bb2.html> @XYMONHOSTURL@/nongreen.html [R=permanent,L] +RewriteRule ^@XYMONHOSTURL@/bbnk.html<mailto:%5e at XYMONHOSTURL@/bbnk.html> @XYMONHOSTURL@/critical.html [R=permanent,L] + +RewriteRule ^@XYMONCGIURL@/bb-hist.sh<mailto:%5e at XYMONCGIURL@/bb-hist.sh> @XYMONCGIURL@/history.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-eventlog.sh<mailto:%5e at XYMONCGIURL@/bb-eventlog.sh> @XYMONCGIURL@/eventlog.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-rep.sh<mailto:%5e at XYMONCGIURL@/bb-rep.sh> @XYMONCGIURL@/report.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-replog.sh<mailto:%5e at XYMONCGIURL@/bb-replog.sh> @XYMONCGIURL@/reportlog.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-snapshot.sh<mailto:%5e at XYMONCGIURL@/bb-snapshot.sh> @XYMONCGIURL@/snapshot.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-findhost.sh<mailto:%5e at XYMONCGIURL@/bb-findhost.sh> @XYMONCGIURL@/findhost.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-csvinfo.sh<mailto:%5e at XYMONCGIURL@/bb-csvinfo.sh> @XYMONCGIURL@/csvinfo.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbitcolumn.sh<mailto:%5e at XYMONCGIURL@/hobbitcolumn.sh> @XYMONCGIURL@/columndoc.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-datepage.sh<mailto:%5e at XYMONCGIURL@/bb-datepage.sh> @XYMONCGIURL@/datepage.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbitgraph.sh<mailto:%5e at XYMONCGIURL@/hobbitgraph.sh> @XYMONCGIURL@/showgraph.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-hostsvc.sh<mailto:%5e at XYMONCGIURL@/bb-hostsvc.sh> @XYMONCGIURL@/svcstatus.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-histlog.sh<mailto:%5e at XYMONCGIURL@/bb-histlog.sh> @XYMONCGIURL@/historylog.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-confreport.sh<mailto:%5e at XYMONCGIURL@/hobbit-confreport.sh> @XYMONCGIURL@/confreport.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-confreport-critical.sh<mailto:%5e at XYMONCGIURL@/hobbit-confreport-critical.sh> @XYMONCGIURL@/confreport-critical.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-nkview.sh<mailto:%5e at XYMONCGIURL@/hobbit-nkview.sh> @XYMONCGIURL@/criticalview.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-certreport.sh<mailto:%5e at XYMONCGIURL@/hobbit-certreport.sh> @XYMONCGIURL@/certreport.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-nongreen.sh<mailto:%5e at XYMONCGIURL@/hobbit-nongreen.sh> @XYMONCGIURL@/nongreen.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-hostgraphs.sh<mailto:%5e at XYMONCGIURL@/hobbit-hostgraphs.sh> @XYMONCGIURL@/hostgraphs.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-ghosts.sh<mailto:%5e at XYMONCGIURL@/hobbit-ghosts.sh> @XYMONCGIURL@/ghostlist.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-notifylog.sh<mailto:%5e at XYMONCGIURL@/hobbit-notifylog.sh> @XYMONCGIURL@/notifications.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-hostlist.sh<mailto:%5e at XYMONCGIURL@/hobbit-hostlist.sh> @XYMONCGIURL@/hostlist.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-perfdata.sh<mailto:%5e at XYMONCGIURL@/hobbit-perfdata.sh> @XYMONCGIURL@/perfdata.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-topchanges.sh<mailto:%5e at XYMONCGIURL@/hobbit-topchanges.sh> @XYMONCGIURL@/topchanges.sh [R=permanent,L] + +RewriteRule ^@SECUREXYMONCGIURL@/bb-ack.sh<mailto:%5e at SECUREXYMONCGIURL@/bb-ack.sh> @SECUREXYMONCGIURL@/acknowledge.sh [R=permanent,L] +RewriteRule ^@SECUREXYMONCGIURL@/hobbit-enadis.sh<mailto:%5e at SECUREXYMONCGIURL@/hobbit-enadis.sh> @SECUREXYMONCGIURL@/enadis.sh [R=permanent,L] +RewriteRule ^@SECUREXYMONCGIURL@/hobbit-nkedit.sh<mailto:%5e at SECUREXYMONCGIURL@/hobbit-nkedit.sh> @SECUREXYMONCGIURL@/criticaleditor.sh [R=permanent,L] +RewriteRule ^@SECUREXYMONCGIURL@/hobbit-ackinfo.sh<mailto:%5e at SECUREXYMONCGIURL@/hobbit-ackinfo.sh> @SECUREXYMONCGIURL@/ackinfo.sh [R=permanent,L] +RewriteRule ^@SECUREXYMONCGIURL@/hobbit-useradm.sh<mailto:%5e at SECUREXYMONCGIURL@/hobbit-useradm.sh> @SECUREXYMONCGIURL@/useradm.sh [R=permanent,L] Are there any other files in apache's /conf.d/ directory that might be taking precedence here? Here are the conf files that are active /etc/apache2/conf-enabled$ ls -al total 8 drwxr-xr-x 2 root root 4096 May 19 10:27 . drwxr-xr-x 8 root root 4096 May 19 10:12 .. lrwxrwxrwx 1 root root 34 May 19 10:14 apache2-doc.conf -> ../conf-available/apache2-doc.conf lrwxrwxrwx 1 root root 30 May 19 10:12 charset.conf -> ../conf-available/charset.conf lrwxrwxrwx 1 root root 44 May 19 10:12 localized-error-pages.conf -> ../conf-available/localized-error-pages.conf lrwxrwxrwx 1 root root 46 May 19 10:12 other-vhosts-access-log.conf -> ../conf-available/other-vhosts-access-log.conf lrwxrwxrwx 1 root root 31 May 19 10:12 security.conf -> ../conf-available/security.conf lrwxrwxrwx 1 root root 36 May 19 10:12 serve-cgi-bin.conf -> ../conf-available/serve-cgi-bin.conf /etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" apache2-doc.conf Alias /manual /usr/share/doc/apache2-doc/manual/ <Directory "/usr/share/doc/apache2-doc/manual/"> Options Indexes FollowSymlinks AllowOverride None Require all granted AddDefaultCharset off </Directory> /etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" charset.conf /etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" localized-error-pages.conf /etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" other-vhosts-access-log.conf CustomLog ${APACHE_LOG_DIR}/other_vhosts_access.log vhost_combined /etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" security.conf ServerTokens OS ServerSignature On TraceEnable Off /etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" serve-cgi-bin.conf <IfModule mod_alias.c> <IfModule mod_cgi.c> Define ENABLE_USR_LIB_CGI_BIN </IfModule> <IfModule mod_cgid.c> Define ENABLE_USR_LIB_CGI_BIN </IfModule> <IfDefine ENABLE_USR_LIB_CGI_BIN> ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/ <Directory "/usr/lib/cgi-bin"> AllowOverride None Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch Require all granted </Directory> </IfDefine> </IfModule> /etc/apache2/conf-enabled$ -jc -- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu<https://urldefense.proofpoint.com/v2/url?u=http-3A__pgp.mit.edu&d=DwMFaQ&c=eIGjsITfXP_y-DLLX0uEHXJvU8nOHrUK8IrwNKOtkVU&r=u6KtIBCRNAeN-AbgJjdZe5zZJVFEfq04dnWD-hYNPL_fxJIIFncbL8W6k0NMJtuq&m=cxrhAPT5Yu-UDSC1SjnR-4QNxlw4PgMBAVBixCxx8-o&s=1kGfAUr1vhcdrUi2Er1XwupmWFRCQFFOTr23jXJ9Mrc&e=> A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments. -- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu<https://urldefense.proofpoint.com/v2/url?u=http-3A__pgp.mit.edu&d=DwMFaQ&c=eIGjsITfXP_y-DLLX0uEHXJvU8nOHrUK8IrwNKOtkVU&r=u6KtIBCRNAeN-AbgJjdZe5zZJVFEfq04dnWD-hYNPL_fxJIIFncbL8W6k0NMJtuq&m=cxrhAPT5Yu-UDSC1SjnR-4QNxlw4PgMBAVBixCxx8-o&s=1kGfAUr1vhcdrUi2Er1XwupmWFRCQFFOTr23jXJ9Mrc&e=> A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? ________________________________ This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy. Your privacy is important to us. Accenture uses your personal data only in compliance with data protection laws. For further information on how Accenture processes your personal data, please see our privacy statement at https://www.accenture.com/us-en/privacy-policy. ______________________________________________________________________________________ www.accenture.com<http://www.accenture.com> _______________________________________________ Xymon mailing list Xymon at xymon.com<mailto:Xymon at xymon.com> http://lists.xymon.com/mailman/listinfo/xymon<https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.xymon.com_mailman_listinfo_xymon&d=DwMFaQ&c=eIGjsITfXP_y-DLLX0uEHXJvU8nOHrUK8IrwNKOtkVU&r=u6KtIBCRNAeN-AbgJjdZe5zZJVFEfq04dnWD-hYNPL_fxJIIFncbL8W6k0NMJtuq&m=cxrhAPT5Yu-UDSC1SjnR-4QNxlw4PgMBAVBixCxx8-o&s=jr0nx4fMCpsvRRdTjc_fM5ZVYiG_ChZ7lkoufpkp9-k&e=>
I thought it was also an apache config issue but I have not been able to identify it.
I did create a test script and placed it in my cgi-bin directory and that test script works fine – along with most other scripts (top changes, config report, find host, etc).
The 2 scripts that I see having an issue are ghostlist.sh & acknowledge.sh – these are both hardlinked to cgiwrap (along with others).
Thanks, John
Thanks, John
From: Galen Johnson [mailto:solitaryr at gmail.com] Sent: Thursday, July 12, 2018 4:06 PM To: Rothlisberger, John R. <john.r.rothlisberger at accenture.com> Cc: xymon >> xymon at xymon.com <xymon at xymon.com> Subject: [External] Re: [Xymon] Need help with upgrade from 4.3.17 to 4.3.20
Is that the only script in cgi-bin doing that? What about the secure cgi bin scripts? That appears to be an apache config problem with how ExecCGI is configured with your path.
On Thu, Jul 12, 2018 at 4:53 PM Rothlisberger, John R. <john.r.rothlisberger at accenture.com<mailto:john.r.rothlisberger at accenture.com>> wrote: I know this is an old issue but the only thing I could find that matches my current problem.
We just built a new Ubuntu 18.04 server with Xymon server 4.3.28 and ghostlist.sh and acknowledge.sh show garbage instead of working properly. Most other scripts in the cgi-bin directory seem to work ok and I even created a test python script that worked in the cgi-bin directory. I have run a clean make/install on the Xymon server and still have this problem.
Anyone have any ideas? This is what I get when I go to ghostlist.sh (same as original poster): ELF[1]���������
�>���� <������@�������(%
���������@�8� �@�%�$� ���
���@�������@�������@�������ø������ø������ �������
���
���8[1]������8[1]������8[1]������ ������� ��������������������������������������������(þ������(þ�������� �������� ���ð[1]�����ð[1]!�����ð[1]!�����œ ������ÐI�������� �����[1]��� ��� ����� !����� !
Thanks, John
This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy. Your privacy is important to us. Accenture uses your personal data only in compliance with data protection laws. For further information on how Accenture processes your personal data, please see our privacy statement at https://www.accenture.com/us-en/privacy-policy.
www.accenture.com
An HTML attachment was scrubbed... URL: <http://lists.xymon.com/pipermail/xymon/attachments/20180713/00d71a3f/attachment-0001.html>
The various utilities in cgi-bin and cgi-secure are hardlinked to cgiwrap since Xymon 4.3.20 Extract of xymon-4.3.28/Changes: Changes from 4.3.19 -> 4.3.20 (15 May 2015) =========================================== * rev 7661 * Summaries should be properly displayed again, and will display on the nongreen.html page as well. * An icon for green acknowledged states is now included -- ironically, the original icon that the other checkmarks were based off of. * The various utilities in cgi-bin and cgi-secure are now hardlinked to cgiwrap at install time instead of softlink, to allow for FollowSymLinks-less apache configurations Dominique ________________________________ De : Xymon <xymon-bounces at xymon.com> de la part de damien at makelofine.org <damien at makelofine.org> Envoyé : jeudi, 12 juillet 2018 23:25 À : Rothlisberger, John R.; 'xymon >> xymon at xymon.com' Objet : [Xymon] Re : Need help with upgrade from 4.3.17 to 4.3.20 Hi, Can you do: file ghostlist.sh It seems this is a binary file (elf executable) instead of bash script. Envoyé depuis mon mobile -------- Message original -------- Objet : Re: [Xymon] Need help with upgrade from 4.3.17 to 4.3.20 De : "Rothlisberger, John R." À : "'xymon >> xymon at xymon.com'" Cc : I know this is an old issue but the only thing I could find that matches my current problem. We just built a new Ubuntu 18.04 server with Xymon server 4.3.28 and ghostlist.sh and acknowledge.sh show garbage instead of working properly. Most other scripts in the cgi-bin directory seem to work ok and I even created a test python script that worked in the cgi-bin directory. I have run a clean make/install on the Xymon server and still have this problem. Anyone have any ideas? This is what I get when I go to ghostlist.sh (same as original poster): ELF[1]��������� ________________________________ �>����<������@�������(% ________________________________ ���������@�8� �@�%�$���� ________________________________ ���@�������@�������@�������ø������ø������������� ________________________________ ��� ________________________________ ���8[1]������8[1]������8[1]������ ������� ��������������������������������������������(þ������(þ�������� �����������ð[1]�����ð[1]!�����ð[1]!�����œ ������ÐI�������� �����[1]������ ����� !����� ! Thanks, John From: Xymon [mailto:xymon-bounces at xymon.com] On Behalf Of Asif Iqbal Sent: Thursday, May 21, 2015 10:20 AM To: Root, Paul T <Paul.Root at centurylink.com> Cc: Xymon Mailing List <xymon at xymon.com>; Cortes, Manny <Manuel.Cortes at orlandohealth.com> Subject: Re: [Xymon] Need help with upgrade from 4.3.17 to 4.3.20 On Thu, May 21, 2015 at 10:51 AM, Root, Paul T <Paul.Root at centurylink.com<mailto:Paul.Root at centurylink.com>> wrote: So really dumb question here. Did you restart apache after removing 4.3.17 and installing 4.3.20? Yep, few times. From: Xymon [mailto:xymon-bounces at xymon.com<mailto:xymon-bounces at xymon.com>] On Behalf Of Asif Iqbal Sent: Thursday, May 21, 2015 9:47 AM To: J.C. Cleaver Cc: Xymon Mailing List; Cortes, Manny Subject: Re: [Xymon] Need help with upgrade from 4.3.17 to 4.3.20 On Wed, May 20, 2015 at 10:36 PM, J.C. Cleaver <cleaver at terabithia.org<mailto:cleaver at terabithia.org>> wrote: On Wed, May 20, 2015 8:10 am, Asif Iqbal wrote:
On Tue, May 19, 2015 at 6:39 PM, J.C. Cleaver <cleaver at terabithia.org<mailto:cleaver at terabithia.org>> wrote:
On Tue, May 19, 2015 12:04 pm, Asif Iqbal wrote:
On Tue, May 19, 2015 at 2:06 PM, J.C. Cleaver <cleaver at terabithia.org<mailto:cleaver at terabithia.org>> wrote:
Hmm. So far, the only way I've been able to reproduce this is by replacing the ScriptAlias directives with mere Alias's in the xymon.conf apache config.
I am using the config, as is, that came as xymon-apache.conf with the source 4.3.20
Has there been any change in the path you've used for the CGI directory since the previous version, or is there any chance that another Alias line
xymon and xymon-client debian version 4.3.17 has been removed, so no more xymon in /usr/lib/xymon
On Tue, May 19, 2015 10:37 am, Cortes, Manny wrote:
Having the same problem after installing 4.3.20 on both Ubuntu server 14.04 and 15.04.
Thanks,
Can you send a copy of the previous and current xymon.conf configs?
Here is the current config
/etc/apache2/sites-enabled$ egrep -v "^$|^#" xymon-apache.conf
Alias /xymon/ "/var/lib/xymon/server/www/" <Directory "/var/lib/xymon/server/www"> Options Indexes FollowSymLinks Includes MultiViews <IfModule mod_authz_core.c> # Apache 2.4+ Require all granted </IfModule> <IfModule !mod_authz_core.c> Order deny,allow Allow from all </IfModule> </Directory> ScriptAlias /xymon-cgi/ "/var/lib/xymon/cgi-bin/" <Directory "/var/lib/xymon/cgi-bin"> AllowOverride None Options ExecCGI FollowSymLinks Includes <IfModule mod_authz_core.c> # Apache 2.4+ Require all granted </IfModule> <IfModule !mod_authz_core.c> Order deny,allow Allow from all </IfModule> </Directory> ScriptAlias /xymon-seccgi/ "/var/lib/xymon/cgi-secure/" <Directory "/var/lib/xymon/cgi-secure"> AllowOverride None Options ExecCGI FollowSymLinks Includes <IfModule mod_authz_core.c> # Apache 2.4+ Require all granted </IfModule> <IfModule !mod_authz_core.c> Order deny,allow Allow from all </IfModule> # Password file where users with access to these scripts are kept. # Create it with "htpasswd -c /var/lib/xymon/server/etc/xymonpasswd USERNAME" # Add more users / change passwords with "htpasswd /var/lib/xymon/server/etc/xymonpasswd USERNAME" # # You can also use a group file to restrict admin access to members of a # group, instead of anyone who is logged in. In that case you must setup # the "xymongroups" file, and change the "Require" settings to require # a specific group membership. See the Apache docs for more details. AuthUserFile /var/lib/xymon/server/etc/xymonpasswd AuthGroupFile /var/lib/xymon/server/etc/xymongroups AuthType Basic AuthName "Xymon Administration" # "valid-user" restricts access to anyone who is logged in. Require valid-user # "group admins" restricts access to users who have logged in, AND # are members of the "admins" group in xymongroups. # Require group admins </Directory> RewriteEngine On RewriteRule ^/xymon/bb.html /xymon/xymon.html [R=permanent,L] RewriteRule ^/xymon/bb2.html /xymon/nongreen.html [R=permanent,L] RewriteRule ^/xymon/bbnk.html /xymon/critical.html [R=permanent,L] RewriteRule ^/xymon-cgi/bb-hist.sh /xymon-cgi/history.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-eventlog.sh /xymon-cgi/eventlog.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-rep.sh /xymon-cgi/report.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-replog.sh /xymon-cgi/reportlog.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-snapshot.sh /xymon-cgi/snapshot.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-findhost.sh /xymon-cgi/findhost.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-csvinfo.sh /xymon-cgi/csvinfo.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbitcolumn.sh /xymon-cgi/columndoc.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-datepage.sh /xymon-cgi/datepage.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbitgraph.sh /xymon-cgi/showgraph.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-hostsvc.sh /xymon-cgi/svcstatus.sh [R=permanent,L] RewriteRule ^/xymon-cgi/bb-histlog.sh /xymon-cgi/historylog.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-confreport.sh /xymon-cgi/confreport.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-confreport-critical.sh /xymon-cgi/confreport-critical.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-nkview.sh /xymon-cgi/criticalview.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-certreport.sh /xymon-cgi/certreport.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-nongreen.sh /xymon-cgi/nongreen.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-hostgraphs.sh /xymon-cgi/hostgraphs.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-ghosts.sh /xymon-cgi/ghostlist.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-notifylog.sh /xymon-cgi/notifications.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-hostlist.sh /xymon-cgi/hostlist.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-perfdata.sh /xymon-cgi/perfdata.sh [R=permanent,L] RewriteRule ^/xymon-cgi/hobbit-topchanges.sh /xymon-cgi/topchanges.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/bb-ack.sh /xymon-seccgi/acknowledge.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/hobbit-enadis.sh /xymon-seccgi/enadis.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/hobbit-nkedit.sh /xymon-seccgi/criticaleditor.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/hobbit-ackinfo.sh /xymon-seccgi/ackinfo.sh [R=permanent,L] RewriteRule ^/xymon-seccgi/hobbit-useradm.sh /xymon-seccgi/useradm.sh [R=permanent,L]
I do not have any old config as I removed the old install
I'm really not sure what to make of this. Everything in the apache config looks to be correct; I can't see at all why apache would fail to execute the CGI vs simply sending you the file. Can you try two experiments? First, replace one of the .sh files with a symlink (instead of a hard link) to the cgiwrap binary. I'd like to see if we can rule out the hardlink itself being the problem. I did that and still seeing the same garbage when click a column /var/lib/xymon/cgi-bin$ ls -al svcstatus.sh lrwxrwxrwx 1 root root 21 May 21 10:29 svcstatus.sh -> ../server/bin/cgiwrap So that did not make any difference Second, can you compare to the xymon-apache.conf with the xymon-apache-secure.conf.DIST file in the build directory to see if there were any unexpected changes? I see the two files look identical. The conf file was not under build dir. $ diff -u /etc/apache2/sites-enabled/xymon-apache.conf xymon-4.3.20/xymond/etcfiles/xymon-apache-secure.DIST --- /etc/apache2/sites-enabled/xymon-apache.conf 2015-05-21 10:25:08.174803811 -0400 +++ xymon-4.3.20/xymond/etcfiles/xymon-apache-secure.DIST 2015-03-13 02:15:38.000000000 -0400 @@ -2,17 +2,17 @@ # # Add this to your Apache configuration, it makes # the Xymon webpages and cgi-scripts available in the -# "/xymon" and "/xymon-cgi" URLs. +# "@XYMONHOSTURL@" and "@XYMONCGIURL@" URLs. # NB: The "Alias" line below must NOT be used if you have # the Xymon webfiles as the root URL. In that case, # you should instead set this: # -# DocumentRoot /var/lib/xymon/server/www +# DocumentRoot @INSTALLWWWDIR@ -Alias /xymon/ "/var/lib/xymon/server/www/" -<Directory "/var/lib/xymon/server/www"> +Alias @XYMONHOSTURL@/ "@INSTALLWWWDIR@/" +<Directory "@INSTALLWWWDIR@"> Options Indexes FollowSymLinks Includes MultiViews <IfModule mod_authz_core.c> # Apache 2.4+ @@ -24,9 +24,8 @@ </IfModule> </Directory> -ScriptAlias /xymon-cgi/ "/var/lib/xymon/cgi-bin/" -<Directory "/var/lib/xymon/cgi-bin"> -SetHandler cgi-script +ScriptAlias @XYMONCGIURL@/ "@CGIDIR@/" +<Directory "@CGIDIR@"> AllowOverride None Options ExecCGI FollowSymLinks Includes <IfModule mod_authz_core.c> @@ -39,9 +38,8 @@ </IfModule> </Directory> -ScriptAlias /xymon-seccgi/ "/var/lib/xymon/cgi-secure/" -<Directory "/var/lib/xymon/cgi-secure"> -SetHandler cgi-script +ScriptAlias @SECUREXYMONCGIURL@/ "@SECURECGIDIR@/" +<Directory "@SECURECGIDIR@"> AllowOverride None Options ExecCGI FollowSymLinks Includes <IfModule mod_authz_core.c> @@ -54,16 +52,16 @@ </IfModule> # Password file where users with access to these scripts are kept. - # Create it with "htpasswd -c /var/lib/xymon/server/etc/xymonpasswd USERNAME" - # Add more users / change passwords with "htpasswd /var/lib/xymon/server/etc/xymonpasswd USERNAME" + # Create it with "htpasswd -c @INSTALLETCDIR@/xymonpasswd USERNAME" + # Add more users / change passwords with "htpasswd @INSTALLETCDIR@/xymonpasswd USERNAME" # # You can also use a group file to restrict admin access to members of a # group, instead of anyone who is logged in. In that case you must setup # the "xymongroups" file, and change the "Require" settings to require # a specific group membership. See the Apache docs for more details. - AuthUserFile /var/lib/xymon/server/etc/xymonpasswd - AuthGroupFile /var/lib/xymon/server/etc/xymongroups + AuthUserFile @INSTALLETCDIR@/xymonpasswd + AuthGroupFile @INSTALLETCDIR@/xymongroups AuthType Basic AuthName "Xymon Administration" @@ -79,37 +77,37 @@ # Rewrite-rules for migrating from the URL's used in Hobbit RewriteEngine On -RewriteRule ^/xymon/bb.html /xymon/xymon.html [R=permanent,L] -RewriteRule ^/xymon/bb2.html /xymon/nongreen.html [R=permanent,L] -RewriteRule ^/xymon/bbnk.html /xymon/critical.html [R=permanent,L] - -RewriteRule ^/xymon-cgi/bb-hist.sh /xymon-cgi/history.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-eventlog.sh /xymon-cgi/eventlog.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-rep.sh /xymon-cgi/report.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-replog.sh /xymon-cgi/reportlog.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-snapshot.sh /xymon-cgi/snapshot.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-findhost.sh /xymon-cgi/findhost.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-csvinfo.sh /xymon-cgi/csvinfo.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbitcolumn.sh /xymon-cgi/columndoc.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-datepage.sh /xymon-cgi/datepage.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbitgraph.sh /xymon-cgi/showgraph.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-hostsvc.sh /xymon-cgi/svcstatus.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/bb-histlog.sh /xymon-cgi/historylog.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-confreport.sh /xymon-cgi/confreport.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-confreport-critical.sh /xymon-cgi/confreport-critical.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-nkview.sh /xymon-cgi/criticalview.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-certreport.sh /xymon-cgi/certreport.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-nongreen.sh /xymon-cgi/nongreen.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-hostgraphs.sh /xymon-cgi/hostgraphs.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-ghosts.sh /xymon-cgi/ghostlist.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-notifylog.sh /xymon-cgi/notifications.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-hostlist.sh /xymon-cgi/hostlist.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-perfdata.sh /xymon-cgi/perfdata.sh [R=permanent,L] -RewriteRule ^/xymon-cgi/hobbit-topchanges.sh /xymon-cgi/topchanges.sh [R=permanent,L] - -RewriteRule ^/xymon-seccgi/bb-ack.sh /xymon-seccgi/acknowledge.sh [R=permanent,L] -RewriteRule ^/xymon-seccgi/hobbit-enadis.sh /xymon-seccgi/enadis.sh [R=permanent,L] -RewriteRule ^/xymon-seccgi/hobbit-nkedit.sh /xymon-seccgi/criticaleditor.sh [R=permanent,L] -RewriteRule ^/xymon-seccgi/hobbit-ackinfo.sh /xymon-seccgi/ackinfo.sh [R=permanent,L] -RewriteRule ^/xymon-seccgi/hobbit-useradm.sh /xymon-seccgi/useradm.sh [R=permanent,L] +RewriteRule ^@XYMONHOSTURL@/bb.html<mailto:%5e at XYMONHOSTURL@/bb.html> @XYMONHOSTURL@/xymon.html [R=permanent,L] +RewriteRule ^@XYMONHOSTURL@/bb2.html<mailto:%5e at XYMONHOSTURL@/bb2.html> @XYMONHOSTURL@/nongreen.html [R=permanent,L] +RewriteRule ^@XYMONHOSTURL@/bbnk.html<mailto:%5e at XYMONHOSTURL@/bbnk.html> @XYMONHOSTURL@/critical.html [R=permanent,L] + +RewriteRule ^@XYMONCGIURL@/bb-hist.sh<mailto:%5e at XYMONCGIURL@/bb-hist.sh> @XYMONCGIURL@/history.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-eventlog.sh<mailto:%5e at XYMONCGIURL@/bb-eventlog.sh> @XYMONCGIURL@/eventlog.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-rep.sh<mailto:%5e at XYMONCGIURL@/bb-rep.sh> @XYMONCGIURL@/report.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-replog.sh<mailto:%5e at XYMONCGIURL@/bb-replog.sh> @XYMONCGIURL@/reportlog.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-snapshot.sh<mailto:%5e at XYMONCGIURL@/bb-snapshot.sh> @XYMONCGIURL@/snapshot.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-findhost.sh<mailto:%5e at XYMONCGIURL@/bb-findhost.sh> @XYMONCGIURL@/findhost.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-csvinfo.sh<mailto:%5e at XYMONCGIURL@/bb-csvinfo.sh> @XYMONCGIURL@/csvinfo.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbitcolumn.sh<mailto:%5e at XYMONCGIURL@/hobbitcolumn.sh> @XYMONCGIURL@/columndoc.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-datepage.sh<mailto:%5e at XYMONCGIURL@/bb-datepage.sh> @XYMONCGIURL@/datepage.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbitgraph.sh<mailto:%5e at XYMONCGIURL@/hobbitgraph.sh> @XYMONCGIURL@/showgraph.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-hostsvc.sh<mailto:%5e at XYMONCGIURL@/bb-hostsvc.sh> @XYMONCGIURL@/svcstatus.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/bb-histlog.sh<mailto:%5e at XYMONCGIURL@/bb-histlog.sh> @XYMONCGIURL@/historylog.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-confreport.sh<mailto:%5e at XYMONCGIURL@/hobbit-confreport.sh> @XYMONCGIURL@/confreport.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-confreport-critical.sh<mailto:%5e at XYMONCGIURL@/hobbit-confreport-critical.sh> @XYMONCGIURL@/confreport-critical.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-nkview.sh<mailto:%5e at XYMONCGIURL@/hobbit-nkview.sh> @XYMONCGIURL@/criticalview.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-certreport.sh<mailto:%5e at XYMONCGIURL@/hobbit-certreport.sh> @XYMONCGIURL@/certreport.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-nongreen.sh<mailto:%5e at XYMONCGIURL@/hobbit-nongreen.sh> @XYMONCGIURL@/nongreen.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-hostgraphs.sh<mailto:%5e at XYMONCGIURL@/hobbit-hostgraphs.sh> @XYMONCGIURL@/hostgraphs.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-ghosts.sh<mailto:%5e at XYMONCGIURL@/hobbit-ghosts.sh> @XYMONCGIURL@/ghostlist.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-notifylog.sh<mailto:%5e at XYMONCGIURL@/hobbit-notifylog.sh> @XYMONCGIURL@/notifications.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-hostlist.sh<mailto:%5e at XYMONCGIURL@/hobbit-hostlist.sh> @XYMONCGIURL@/hostlist.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-perfdata.sh<mailto:%5e at XYMONCGIURL@/hobbit-perfdata.sh> @XYMONCGIURL@/perfdata.sh [R=permanent,L] +RewriteRule ^@XYMONCGIURL@/hobbit-topchanges.sh<mailto:%5e at XYMONCGIURL@/hobbit-topchanges.sh> @XYMONCGIURL@/topchanges.sh [R=permanent,L] + +RewriteRule ^@SECUREXYMONCGIURL@/bb-ack.sh<mailto:%5e at SECUREXYMONCGIURL@/bb-ack.sh> @SECUREXYMONCGIURL@/acknowledge.sh [R=permanent,L] +RewriteRule ^@SECUREXYMONCGIURL@/hobbit-enadis.sh<mailto:%5e at SECUREXYMONCGIURL@/hobbit-enadis.sh> @SECUREXYMONCGIURL@/enadis.sh [R=permanent,L] +RewriteRule ^@SECUREXYMONCGIURL@/hobbit-nkedit.sh<mailto:%5e at SECUREXYMONCGIURL@/hobbit-nkedit.sh> @SECUREXYMONCGIURL@/criticaleditor.sh [R=permanent,L] +RewriteRule ^@SECUREXYMONCGIURL@/hobbit-ackinfo.sh<mailto:%5e at SECUREXYMONCGIURL@/hobbit-ackinfo.sh> @SECUREXYMONCGIURL@/ackinfo.sh [R=permanent,L] +RewriteRule ^@SECUREXYMONCGIURL@/hobbit-useradm.sh<mailto:%5e at SECUREXYMONCGIURL@/hobbit-useradm.sh> @SECUREXYMONCGIURL@/useradm.sh [R=permanent,L] Are there any other files in apache's /conf.d/ directory that might be taking precedence here? Here are the conf files that are active /etc/apache2/conf-enabled$ ls -al total 8 drwxr-xr-x 2 root root 4096 May 19 10:27 . drwxr-xr-x 8 root root 4096 May 19 10:12 .. lrwxrwxrwx 1 root root 34 May 19 10:14 apache2-doc.conf -> ../conf-available/apache2-doc.conf lrwxrwxrwx 1 root root 30 May 19 10:12 charset.conf -> ../conf-available/charset.conf lrwxrwxrwx 1 root root 44 May 19 10:12 localized-error-pages.conf -> ../conf-available/localized-error-pages.conf lrwxrwxrwx 1 root root 46 May 19 10:12 other-vhosts-access-log.conf -> ../conf-available/other-vhosts-access-log.conf lrwxrwxrwx 1 root root 31 May 19 10:12 security.conf -> ../conf-available/security.conf lrwxrwxrwx 1 root root 36 May 19 10:12 serve-cgi-bin.conf -> ../conf-available/serve-cgi-bin.conf /etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" apache2-doc.conf Alias /manual /usr/share/doc/apache2-doc/manual/ <Directory "/usr/share/doc/apache2-doc/manual/"> Options Indexes FollowSymlinks AllowOverride None Require all granted AddDefaultCharset off </Directory> /etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" charset.conf /etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" localized-error-pages.conf /etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" other-vhosts-access-log.conf CustomLog ${APACHE_LOG_DIR}/other_vhosts_access.log vhost_combined /etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" security.conf ServerTokens OS ServerSignature On TraceEnable Off /etc/apache2/conf-enabled$ egrep -v "^$|^#|^ *#" serve-cgi-bin.conf <IfModule mod_alias.c> <IfModule mod_cgi.c> Define ENABLE_USR_LIB_CGI_BIN </IfModule> <IfModule mod_cgid.c> Define ENABLE_USR_LIB_CGI_BIN </IfModule> <IfDefine ENABLE_USR_LIB_CGI_BIN> ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/ <Directory "/usr/lib/cgi-bin"> AllowOverride None Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch Require all granted </Directory> </IfDefine> </IfModule> /etc/apache2/conf-enabled$ -jc -- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu<http://pgp.mit.edu> A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments. -- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu<http://pgp.mit.edu> A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? ________________________________ This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy. Your privacy is important to us. Accenture uses your personal data only in compliance with data protection laws. For further information on how Accenture processes your personal data, please see our privacy statement at https://www.accenture.com/us-en/privacy-policy. ______________________________________________________________________________________ www.accenture.com
On Wed, May 20, 2015, at 10:10, Asif Iqbal wrote:
ScriptAlias /xymon-cgi/ "/var/lib/xymon/cgi-bin/" <Directory "/var/lib/xymon/cgi-bin"> AllowOverride None Options ExecCGI FollowSymLinks Includes <IfModule mod_authz_core.c> # Apache 2.4+ Require all granted </IfModule> <IfModule !mod_authz_core.c> Order deny,allow Allow from all </IfModule> </Directory>
What if you add to your <Directory> for the two different cgi-bin locations "SetHandler cgi-script" like this:
ScriptAlias /xymon-cgi/ "/var/lib/xymon/cgi-bin" <Directory "/var/lib/xymon/cgi-bin"> SetHandler cgi-script AllowOverride None Options ExecCGI FollowSymLinks Includes <IfModule mod_authz_core.c> # Apache 2.4+ Require all granted </IfModule> <IfModule !mod_authz_core.c> Order deny,allow Allow from all </IfModule> </Directory>
On Thu, May 21, 2015 at 8:31 AM, Mark Felder <feld at feld.me> wrote:
On Wed, May 20, 2015, at 10:10, Asif Iqbal wrote:
ScriptAlias /xymon-cgi/ "/var/lib/xymon/cgi-bin/" <Directory "/var/lib/xymon/cgi-bin"> AllowOverride None Options ExecCGI FollowSymLinks Includes <IfModule mod_authz_core.c> # Apache 2.4+ Require all granted </IfModule> <IfModule !mod_authz_core.c> Order deny,allow Allow from all </IfModule> </Directory>
What if you add to your <Directory> for the two different cgi-bin locations "SetHandler cgi-script" like this:
ScriptAlias /xymon-cgi/ "/var/lib/xymon/cgi-bin" <Directory "/var/lib/xymon/cgi-bin"> SetHandler cgi-script
I added this line and restarted but that did not seem to help.
AllowOverride None Options ExecCGI FollowSymLinks Includes <IfModule mod_authz_core.c> # Apache 2.4+ Require all granted </IfModule> <IfModule !mod_authz_core.c> Order deny,allow Allow from all </IfModule></Directory>
Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon
-- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing?
participants (8)
-
cleaver＠terabithia.org
-
damien＠makelofine.org
-
dominique.frise＠unil.ch
-
feld＠feld.me
-
john.r.rothlisberger＠accenture.com
-
Paul.Root＠CenturyLink.com
-
solitaryr＠gmail.com
-
vadud3＠gmail.com