Nav-users

nav-users@lister.sikt.no

3 participants
1384 discussions

Announcement: NAV 5.16.0 released
by Morten Brekkevold 19 Des '25

19 Des '25

The first feature release of the 5.16 series of NAV is now out! The source code is available for download at GitHub [1]. New packages for Debian 12 (Bookworm), 11 (Bullseye) and 13 (Trixie) are available in our APT repository. Please be extra aware of config file changes, especially in ipdevpoll.conf. Look out for *.dpkg-dist files in /etc/nav and make sure to update your running config. ## Security - Upgrade jQuery library and dependencies (#3582) - Stop revealing actual API tokens in any type of log (#3686) - Escape column text in audit log table to mitigate potential XSS vulnerabilities (#2803) ## Added - Added support for searching for inactive devices by serial number in Device History tool (#1996) - Added OS version and NAV version to exception debug view (#2082) - Add proper audit log entries for API token manipulations (legacy and JWT) (#3405) - Added a Django authentication backend to do NAV legacy style LDAP authentication, in preparation for authentication system rewrite (#3498) - Added confirmation modal when deleting dashboards (#3648) - Added test/research program nav_cisco_auth_sessions to retrieve information about authentication framework sessions from Cisco switches (#3711) - Added support for searching by description in main info search (#3149) - Allow NAV_CONFIG_DIR environment variable to override where NAV looks for configuration files (#3697) ## Changed - Added new dependency distro for identifying Linux distributions (#2082) - Load info page search results with HTMX (#3618) - Load filtered device history with HTMX (#3663) - Disabled broken audit log actor sorting (#3581) ## Fixed - Fixed room urls for rooms with slashes in name (#3661) - Upgrade select2 dependency to latest version (#1873) - Strip null bytes from LLDP local chassis IDs to avoid topo job abort errors (ValueErrors) (#2479) - Fixed ipdevpoll inventory job crash when including Comet T3611 MIB for collecting information for other Comet sensors (#3566) - Properly redirect entire browser to login page when a background HTMX request is received on an unauthenticated session (e.g. after session times out) (#3656) - Fixed accessing seeddb/room URLs for rooms with ‘/’ in names (#3659) - Fixed broken event search URL (#3677) - Fixed accessing SeedDB urls for locations, usages, organizations and device groups with ‘/’ in names (#3687) - Fixed bug where subnets were not selectable in the IPAM subnet allocator (#3692) - Fixed bug in SeedDB IP Device form where enter in a text field triggered an unwanted connectivity check (#3694) - Added success messages for JWT Token Create and Edit views ## Release notes We always advise you to have a look at NAV’s accompanying release notes before upgrading. Happy NAVing everyone! ## Links [1] https://github.com/Uninett/nav/releases [2] https://nav.uninett.no/install-instructions/#debian [3] https://nav.readthedocs.io/en/latest/release-notes.html#nav-5-16

1 0

Unable to upgrade nav 12 in debian 11 to any upper version.
by Secundino Grau 15 Des '25

15 Des '25

Hello, I have a fully working nav 5.12 instance and when I try to upgrade to 5.13, 5.14, 5.15, always have a lot of internal server errors 500 , and I'm unable to get graphite work again. If the process of upgrade is always within debian 11 packages, no success. I tested upgrading from debian 11 to 12, and then upgraded NAV but not success! Please, does anyone know if there are some steps in the upgrade process that I have missed? Thanks in advance, S. Grau

2 1

NAV 5.15.1 - My homepage broke
by Ingeborg Østrem Hellemo 09 Des '25

09 Des '25

Upgraded to 5.15.1 on my FreeBSD server and my homepage broke. In Chrome and Firefox no widgets are shown and the buttons/menus connected to dashboards are all over the place. See attachment. Edge is limping along, showing widgets, but with dangling search button and the other buttons as shown in the picture. I guess I am missing some htmx-stuff (perhaps not listed in requirements.txt) but I could need some help and pointers... --Ingeborg -- Ingeborg Østrem Hellemo -- ingeborg.hellemo(a)uit.no<mailto:ingeborg.hellemo@uit.no> Dep. of Information Technology --- Univ. of Tromsø

2 2

Announcement: NAV 5.15.1 released
by Morten Brekkevold 17 Nov '25

17 Nov '25

The first maintenance release of the 5.15 series of NAV is now out! The source code is available for download at GitHub [1]. New packages for Debian 12 (Bookworm), 11 (Bullseye) and 13 (Trixie) are available in our APT repository. Please be extra aware of config file changes, especially in ipdevpoll.conf. Look out for *.dpkg-dist files in /etc/nav and make sure to update your running config. ## Fixed - Fixed crash reports being sent by unauthenticated clients accessing the API (#3650) - Fixed non-working port overviews for devices that contain modules with slashes in their name. A broken interfaces API endpoint caused both *ipdevinfo* and *interface browser* port lists to malfunction. (#3652) ## Release notes We always advise you to have a look at NAV’s accompanying release notes before upgrading. Happy NAVing everyone! ## Links [1] https://github.com/Uninett/nav/releases [2] https://nav.uninett.no/install-instructions/#debian [3] https://nav.readthedocs.io/en/latest/release-notes.html#nav-5-15

1 0

Locate IP address
by Einar Bjarni Halldórsson 10 Nov '25

10 Nov '25

Hi, I just setup NAV to test. I’m looking for a replacement for netdisco, which I’ve mostly used to track down IP addresses to switch+port. I’ve got NAV running and I added my switches and routers to the Seed DB. I can look for my workstations MAC address in machine tracker, but it doesn’t show the IP address. If I look search for the IP address it doesn’t find anything. Am I missing something, or does NAV only find IP addresses of switches and L3 connected devices to those? I know netdisco discovers IP addresses of L2 connected devices. Best wishes, .einar

2 1

Announcement: NAV 5.15.0 released
by Morten Brekkevold 30 Okt '25

30 Okt '25

The first feature release of the 5.15 series of NAV is now out! The source code is available for download at GitHub [1]. New packages for Debian 12 (Bookworm) and 11 (Bullseye) are available in our APT repository. Please be extra aware of config file changes, especially in ipdevpoll.conf. Look out for *.dpkg-dist files in /etc/nav and make sure to update your running config. ## Security - In preparation for properly protecting against CSRF attacks throughout - NAV: Added CSRF tokens to AJAX POST requests (#3465) - Removed CSRF tokens from GET requests (#3472) ## Removed - Removed unused vendored Foundation CSS stylesheets (#3479) - Removed vendored Foundation JavaScript library from codebase (#3542) ## Added - Show VLAN netident in ipdevinfo port list (#2160) - Dashboards are now shareable between users (#2344) - Show device MAC address in the Device Info tab of ipdevinfo (#3222) - Added Django 5.2 and Python 3.13 to default test matrix (#3467) - Improved user feedback in PortAdmin by loading live port details in background, after initial page load (#3544) - Added search results preview in navbar (#3577) - Documented how to enable IPv6 connectivity inside devcontainer (Docker) ## Changed - Updated NAPALM dependency to 5.1.0 (#3495) - Replaced SeedDB IP Device "check connectivity" JavaScript with HTMX, including improved user feedback (#3560) ### Non-visible and developer-centric changes - The dated Foundation JavaScript libraries and CSS stylesheets are being replaced by a combination of HTMX-based features, new internal libraries and newer alternative libraries. The goal is to keep the outward user interface more or less unchanged: - Use HTMX modals in SeedDB Patch tool (#3461) - Replaced tooltip in status actions with accessible help text toggle (#3463) - Replaced Foundation Joyride with `Driver.js` implementation (#3468) - Replaced Foundation Topbar JS with JQuery (#3476) - Replaced Foundation Equalizer with JQuery (#3477) - Replaced foundation alert plugin with custom JavaScript (#3481) - Replaced native tooltips with NAV tooltips (#3482) - Replaced navlet modals with HTMX implementation (#3487) - Replaced search hint modals in Radius tool with HTMX (#3494) - Replaced radius detail modals with HTMX (#3514) - Added fit-content size to modals to support large content - Replace IPAM subnet diagram help modal with HTMX - Replaced "about logging" modal with HTMX - Replaced Foundation dropdowns with custom implementation - Replaced "import dashboard" modal with HTMX - Replaced Machine Tracker modals with HTMX - Replaced modals in ipdevinfo tool with HTMX - Replaced threshold form help modal with HTMX - Added custom NAV tooltip as replacement for Foundation JS (#3449) - Added reusable HTMX modal utilities and styles (#3461) - Added modal closing behaviour controls for close button visibility and outside click handling (#3537) - Added support for positioning popover on multiple sides (#3550) - Replaced feedback modal in Portadmin with HTMX (#3540) - Replaced Foundation dropdowns with popovers (#3531) - Upgraded tinysort dependency (#3580) - Replaced Foundation Clearing Lightbox with custom Lightbox plugin for room/location picture gallery (#3530) - Use fixed position tooltips in status widgets and SeedDB list tree (#3576) - Added support for controlling popovers with client side events (#3578) - Replaced outdated timepicker library with flatpickr (#3587) - Modernized Django URL config, mostly by replacing usage of `re_path()` with `path()` (#3515, #3548, #3631) ## Fixed - Protect against unexpected NUL bytes in SNMP strings by stripping them (#2479) - Fixed bug where status widget tooltip gets stuck (#3301) - Show friendly error message in Arnold when attempting to block ports on switches that do not feature a writeable management profile (#3383) - Fixed bug where ipdevinfo job refresh does not display error messages properly (#3385) - Made it possible to un-revoke JWT refresh token by recreating the token (#3457) - Fixed broken all-time searches in Radius tool (#3500) - Removed "no racks" alert after adding a new rack to a room (#3506) - Show distinct filter groups in Groups and Permissions modal in Alert Profiles (#3523) - Show errors on invalid IP in Network Explorer search (#3534) - Fixed saving rooms/locations with active alerts widgets after editing (#3561) - Fixed sudo-ing to the default (anonymous) account (#3571) - Fixed PortAdmin bug where restarting interfaces fails (#3589) - Fixed tooltips in Device History and Subnet Matrix tools (#3591) - Enabled GetBulk / bulkwalk operations under synchronous SNMP v3 communication (enormously speeding up PortAdmin SNMPv3 queries) (#3594) - Adjusted size and position of "close modal" icon to avoid overlap with text - Fixed bug where QR Code button is not clickable ## Release notes We always advise you to have a look at NAV’s accompanying release notes before upgrading. Happy NAVing everyone! ## Links [1] https://github.com/Uninett/nav/releases [2] https://nav.uninett.no/install-instructions/#debian [3] https://nav.readthedocs.io/en/latest/release-notes.html#nav-5-15

1 0

Announcement: NAV 5.14.1 released
by Morten Brekkevold 01 Sep '25

01 Sep '25

The first maintenance release of the 5.14 series of NAV is now out! The source code is available for download at GitHub [1]. New packages for Debian 12 (Bookworm) and 11 (Bullseye) are available in our APT repository. Please be extra aware of config file changes, especially in ipdevpoll.conf. Look out for *.dpkg-dist files in /etc/nav and make sure to update your running config. Fixed ===== - Correctly display current chosen filter in Status tool (#3442) - Fixed showing activity graphs in port details in ipdevinfo (#3484) Release notes ============= We always advise you to have a look at NAV’s accompanying release notes before upgrading. Happy NAVing everyone! Links ===== [1] https://github.com/Uninett/nav/releases [2] https://nav.uninett.no/install-instructions/#debian [3] https://nav.readthedocs.io/en/latest/release-notes.html#nav-5-14

1 0

Announcement: NAV 5.14.0 released
by Morten Brekkevold 21 Aug '25

21 Aug '25

The first feature release of the 5.14 series of NAV is now out! The source code is available for download at GitHub [1]. New packages for Debian 12 (Bookworm) and 11 (Bullseye) are available in our APT repository. Please be extra aware of config file changes, especially in ipdevpoll.conf. Look out for *.dpkg-dist files in /etc/nav and make sure to update your running config. Added ===== User-visible additions ---------------------- - New SQL reports in the Report tool: - Added an operational entities SQL report. (#1947) - Added an Events detected last 24 hours SQL report. (#3305) - Collection job refreshing from web UI: - Added button to refresh ipdevpoll background jobs directly from IP Device Info tool. (#3350) - ipdevpoll can now immediately reschedule jobs on incoming refresh events on the NAV event queue. Refreshes can be ordered from the command line using the navrefresh program. (#2626) - Added QR code link features: - Added link to “My Stuff” menu to generate QR code link to current page. (#2897) - Added button to SeedDB that downloads a ZIP file with QR Codes linking to the selected netboxes/rooms. (#2899) - Added config option to switch between generating SVG or PNG QR codes. (#2916) - API additions: - Added API endpoint for looking up vendor of MAC address. (#3337) - Added API endpoint for the NetboxEntity model. (#3378) - JWT token signing features: - Added API endpoint for JWT refresh tokens. (#3270) - Added new tab to User and API administration tool for managing JWT refresh tokens. (#3273) - Expiration times for issued JWT refresh tokens can be configured via jwt.conf. (#3016) - Added support for including API endpoint read/write permission claims to JWT tokens. - Added password security warnings: - Show a banner if the logged in user’s password is insecure or old and it should be changed. (#3345) - Show a banner to admins if other users’ passwords are insecure or old. (#3346) - Added support for the T3611 sensor from Comet. (#3307) - Added support for fetching DHCP pool statistics from Kea DHCP API. (#2931) Developer-centric additions --------------------------- - Added HTMX as new front-end library. (#3386) - Document practical usage of devcontainer for developers. (#3398) - Added developer utilities for easily dumping/loading production data into devcontainer. Changed ======= User-visible changes -------------------- - Replaced QuickSelect component picker with dynamic HTMX-based search in Maintenance tool. (#3425) - Replaced QuickSelect component picker with dynamic HTMX-based search in Device history tool. (#3434) - Dependency changes: - Updated NAPALM dependency to 5.0 (#2358) - Updated django-rest-framework to version 3.14+, for proper compatibility Django 4.2 (#3403) Developer-centric changes ------------------------- - Replaced usage of twisted.internet.defer.returnValue with regular Python return, due to deprecation in newest Twisted version. (#2955) - Redefined NAV account model to be usable as a Django user model. (#3332) - Remove unused ColumnsForm (#3243) Fixed ===== - Fixed missing ARP API endpoint documentation for IP address filtering. (#3215) - Fixed broken location history searches from location view page. (#3360) - Restored ISO timestamps in the web UI (as they were before NAV 5.13) (#3369) - Fixed broken Add to dashboard functionality for boolean value sensors (#3394) - Fixed sorting by timestamp columns in threshold rule table and Useradmin API-token table. (#3410) - Take advantage of auxiliary end_time indexes on ARP table to improve prefix usage lookups in API. (#3413) - Made Docker test environment usable for devs on Apple silicon Macs. Release notes ============= We always advise you to have a look at NAV’s accompanying release notes before upgrading. Happy NAVing everyone! Links ===== [1] https://github.com/Uninett/nav/releases [2] https://nav.uninett.no/install-instructions/#debian [3] https://nav.readthedocs.io/en/latest/release-notes.html#nav-5-14

1 0

Security announcement: NAV 5.13.1 released
by Morten Brekkevold 11 Jun '25

11 Jun '25

The first maintenance release of the 5.13 series of NAV is now out, and contains a security patch for a serious privilege escalation vulnerability in the web GUI. We recommend that all users upgrade as soon as possible. The source code is available for download at GitHub [1]. New packages for Debian 12 (Bookworm) and 11 (Bullseye) are available in our APT repository. Security ======== - Lock down API access for unprivileged users By default, NAV granted full API access to logged-in users, regardless of their configured privilege level. This would give unprivileged users access to manipulate NAV configuration and even elevate their own user privileges to administrator level. Read the full security advisory at https://github.com/Uninett/nav/security/advisories/GHSA-gprr-5vvf-582g Changed ======= - Update NAPALM dependency to 5.0 to keep NAV web GUI working (#2358) Fixed ===== - Fix filtering of 'Last seen' and sorting by 'Last active' in netbox interfaces view in room info (#3329) Release notes ============= We always advise you to have a look at NAV’s accompanying release notes before upgrading. Happy NAVing everyone! Links ===== [1] https://github.com/Uninett/nav/releases [2] https://nav.uninett.no/install-instructions/#debian [3] https://nav.readthedocs.io/en/latest/release-notes.html#nav-5-13

4 6

Announcement: NAV 5.13.2 released
by Morten Brekkevold 16 Mai '25

16 Mai '25

The second maintenance release of the 5.13 series of NAV is now out! The source code is available for download at GitHub [1]. New packages for Debian 12 (Bookworm) and 11 (Bullseye) are available in our APT repository. Fixed ===== - Relax API permissions for endpoints used by NAV web GUI tools intended for non-admin users. Several tools stopped working for non-admin users as a result of the permissions lockdown in the 5.13.1 security fix. - Relax permissions for API interface view endpoint (#3373) - Relax permissions for API prefix usage view endpoint (#3374) - Relax permissions for API list room endpoint (#3375) Release notes ============= We always advise you to have a look at NAV’s accompanying release notes before upgrading. Happy NAVing everyone! Links ===== [1] https://github.com/Uninett/nav/releases [2] https://nav.uninett.no/install-instructions/#debian [3] https://nav.readthedocs.io/en/latest/release-notes.html#nav-5-13 -- Sincerely, Morten Brekkevold Sikt – Norwegian Agency for Shared Services in Education and Research

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Nav-users