Nav-users

nav-users@lister.sikt.no

1376 discussions

Announcement: NAV 5.13.2 released
by Morten Brekkevold 16 Mai '25

16 Mai '25

The second maintenance release of the 5.13 series of NAV is now out! The source code is available for download at GitHub [1]. New packages for Debian 12 (Bookworm) and 11 (Bullseye) are available in our APT repository. Fixed ===== - Relax API permissions for endpoints used by NAV web GUI tools intended for non-admin users. Several tools stopped working for non-admin users as a result of the permissions lockdown in the 5.13.1 security fix. - Relax permissions for API interface view endpoint (#3373) - Relax permissions for API prefix usage view endpoint (#3374) - Relax permissions for API list room endpoint (#3375) Release notes ============= We always advise you to have a look at NAV’s accompanying release notes before upgrading. Happy NAVing everyone! Links ===== [1] https://github.com/Uninett/nav/releases [2] https://nav.uninett.no/install-instructions/#debian [3] https://nav.readthedocs.io/en/latest/release-notes.html#nav-5-13 -- Sincerely, Morten Brekkevold Sikt – Norwegian Agency for Shared Services in Education and Research

1 0

Security announcement: NAV 5.13.1 released
by Morten Brekkevold 14 Mai '25

14 Mai '25

The first maintenance release of the 5.13 series of NAV is now out, and contains a security patch for a serious privilege escalation vulnerability in the web GUI. We recommend that all users upgrade as soon as possible. The source code is available for download at GitHub [1]. New packages for Debian 12 (Bookworm) and 11 (Bullseye) are available in our APT repository. Security ======== - Lock down API access for unprivileged users By default, NAV granted full API access to logged-in users, regardless of their configured privilege level. This would give unprivileged users access to manipulate NAV configuration and even elevate their own user privileges to administrator level. Read the full security advisory at https://github.com/Uninett/nav/security/advisories/GHSA-gprr-5vvf-582g Changed ======= - Update NAPALM dependency to 5.0 to keep NAV web GUI working (#2358) Fixed ===== - Fix filtering of 'Last seen' and sorting by 'Last active' in netbox interfaces view in room info (#3329) Release notes ============= We always advise you to have a look at NAV’s accompanying release notes before upgrading. Happy NAVing everyone! Links ===== [1] https://github.com/Uninett/nav/releases [2] https://nav.uninett.no/install-instructions/#debian [3] https://nav.readthedocs.io/en/latest/release-notes.html#nav-5-13

4 4

Time format is changed in NAV 5.13
by Ingeborg Hellemo 12 Mai '25

12 Mai '25

After upgrading to 5.13.0 we notice that the time and date format has changed from "2025-04-26 13:00:00" to "May 7, 2025, 1:36 p.m." Is this a deliberate change in NAV or a result of a change in a library? Most important: How can we get the old format back? --Ingeborg -- Ingeborg Østrem Hellemo -- ingeborg.hellemo(a)uit.no Dep. of Information Technology --- Univ. of Tromsø

2 3

Announcement: NAV 5.13.0 released
by Morten Brekkevold 07 Mar '25

07 Mar '25

The first feature release of the 5.13 series of NAV is now out! The source code is available for download at GitHub [1]. New packages for Debian 12 (Bookworm) and 11 (Bullseye) are available in our APT repository. Security ======== - Omit Palo Alto API keys from ARP plugin log output (#3251) Added ===== - Add option for showing OUI vendor name in Machine Tracker searches (#3292) - Add cronjob for populating database with OUI data nightly (#3320) - Run test suite by default on Python 3.11 and Django 4.2 (#2850) - Added tests for device history search (#3261) Changed ======= - Upgraded Django requirement to 4.2 (#2789) - Upgraded and cleaned up various Docker environments used for development and testing to Debian Bookworm / Python 3.11 (#3284) Fixed ===== - Fix minor incompatibilities with Django 4.2 (#2850) - Fixed non-responsive search function in room map widget (#3207) - Validate interval inputs in several search forms to avoid unhandled overflow errors (switch port activity, radius top talkers report, radius error log search, radius account log search) (#3242, #3245, #3246, #3247) - Verify that multiple quarantine rules cannot be added with identical VLANs in Arnold (#3244) - Fixed broken module history view in device history (#3258) - Stop sending error mails to site admins from graphite-web proxy endpoint when graphite response code is in the 5XX range (#3259) - Ignore case of sysname in IP device info (#3262) - Add user-agent header when downloading OUI text file (#3291) Release notes ============= We always advise you to have a look at NAV’s accompanying release notes before upgrading. Happy NAVing everyone! Links ===== [1] https://github.com/Uninett/nav/releases [2] https://nav.uninett.no/install-instructions/#debian [3] https://nav.readthedocs.io/en/latest/release-notes.html#nav-5-13 -- Sincerely, Morten Brekkevold Sikt – Norwegian Agency for Shared Services in Education and Research

1 0

Re: During upgrade I get "The automatic update script failed to update database"
by Davide Miccone 19 Des '24

19 Des '24

I'm doing a full system upgrade. Using navsyncdb worked. Thank you

1 0

Announcement: NAV 5.12.0 released
by Morten Brekkevold 16 Des '24

16 Des '24

The first feature release of the 5.12 series of NAV is now out! The source code is available for download at GitHub [1]. New packages for Debian 11 (Bullseye) are available in our APT repository as usual. We haven't started building packages for Debian 12 (Bookworm) yet, as NAV does not yet support running under Python 3.11. Please be extra aware of config file changes, especially in ipdevpoll.conf. Look out for *.dpkg-dist files in /etc/nav and make sure to update your running config. Removed ======= - Removed dependencies django-crispy-forms and crispy-forms-foundation (#2794) Added ===== - Active maintenance tasks that only reference deleted components will be automatically cancelled (#3229) - Alert profiles filter match value dropdowns now support interactive value searches (#3238) - Added support for setting access port VLANs for Cisco Small Business switches in PortAdmin (by reverting to non-Cisco-specific handler routines for this subgroup of products) (#3249) Changed ======= - Switched to building CSS from Sass using webpack instead of deprecated libsass. (#2849) - Run tests using tox version 4 (#2973) - The ipdevpoll plugin to fetch ARP cache data from a netbox’s Palo Alto firewall API is now configured through a new management profile type assigned to that netbox (#3147) - The old-style setup.py script was removed and installation docs were updated (#3176) - Ensure that CSRF token info is included in all forms that have been refactored to remove the django-crispy-forms dependency (#3157) Fixed ===== - Alert profiles filter match value dropdowns now support more than the old hard limit of 1000 choices (#2908) - Disable deletion of the default dashboard (#3150) - Rooms and locations with periods in their IDs can now be properly retrieved from the corresponding API endpoints (#3186) - Fix spurious crashing when loading some Netmap layer 3 views (#3225) - Improve description of deleted maintenance components (#3228) - Stop SNMP-based arp plugin from stepping on the paloaltoarp plugins toes. Note that this requires updating the plugin order in the ip2mac job in ipdevpoll.conf (#3252) - Ensure that each account has exactly one default dashboard Release notes ============= We always advise you to have a look at NAV’s accompanying release notes before upgrading. Happy NAVing everyone! Links ===== [1] https://github.com/Uninett/nav/releases [2] https://nav.uninett.no/install-instructions/#debian [3] https://nav.readthedocs.io/en/latest/release-notes.html#nav-5-12 -- Sincerely, Morten Brekkevold Sikt – Norwegian Agency for Shared Services in Education and Research

1 0

NAV - Palo Alto Plugin: MAC Records Keep Expiring
by Mehmet E. Şahin (BAŞKANLIK-BİDB) 10 Des '24

10 Des '24

Hi Everyone, We started using the new Palo Alto plugin with excitement. It successfully retrieves the ARP table from the Palo Alto firewall as XML every 20 minutes. However, for some reason, while reading the ARP table from Palo Alto, the records are constantly expiring and being added again. This does not occur for the ARP records received via SNMP. Has anyone observed this situation? In the example below, the IP address 192.168.0.250 belongs to a server. There is no disconnection, but for some reason, the MAC tracker records show that a re-connection is happening every 20 minutes. (BTW - our nav version is the latest (5.10.2).) Best Regards Mehmet E. ŞAHİN

3 5

During upgrade I get "The automatic update script failed to update database"
by Davide Miccone 12 Nov '24

12 Nov '24

This is not the first time that happen. Upgrading to the latest 5.11 (from 5.9) I get error at the end. Inspecting nav DB it seems that DB has been updated. To check that DB has been updated I read the content of file cat sc.05.11.0001.sql, cat sc.05.11.0002.sql and check the DB for the presence of the table "manage.oui" and of the new records in the table "altertype". Below the error that I get: ===================== Automatic database update failed The automatic update script failed to update the database. Script output: could not connect to server: Connection refused Is the server running on host "localhost" (::1) and accepting TCP/IP connections on port 5432? could not connect to server: Connection refused Is the server running on host "localhost" (127.0.0.1) and accepting TCP/IP connections on port 5432?

2 1

Port description is not committed Cisco 3750X
by Davide Miccone 12 Nov '24

12 Nov '24

Cisco a C3750X-48. Cisco IOS Software, C3750E Software (C3750E-UNIVERSALK9-M), Version 15.2(4)E, RELEASE SOFTWARE (fc2) NAV 5.11.0 Port description is not written to switch configuration. Changes to vlan and enable/disable works Davide

2 1

Error in snmptrapd
by Ingeborg Hellemo 04 Nov '24

04 Nov '24

Was trying to use snmptrapd for the first time in years. Incoming traps generates this error: 2024-10-30 11:00:25,287 [ERROR] [zen.pynetsnmp.callback] Exception in _callback invalid input syntax for type inet: "None" LINE 1: ... LEFT JOIN gwportprefix USING (interfaceid) WHERE 'None' IN ... ^ Traceback (most recent call last): File "/usr/local/lib/python3.9/site-packages/pynetsnmp/netsnmp.py", line 464, in _callback sess.callback(pdu.contents) File "/usr/local/lib/python3.9/site-packages/nav/snmptrapd/agent_pynetsnmp.py ", line 221, in callback self._callback(addr, pdu) File "/usr/local/lib/python3.9/site-packages/nav/snmptrapd/agent_pynetsnmp.py ", line 130, in callback self._client_callback(trap) File "/usr/local/lib/python3.9/site-packages/nav/bin/snmptrapd.py", line 234, in trap_handler _log_trap_handle_result(handled_by, trap) File "/usr/local/lib/python3.9/site-packages/nav/bin/snmptrapd.py", line 239, in _log_trap_handle_result trap.netbox.sysname + ' ({})'.format(trap.agent) if trap.netbox else trap.agent File "/usr/local/lib/python3.9/site-packages/nav/snmptrapd/trap.py", line 87, in netbox setattr(self, '_netbox', self._lookup_agent()) File "/usr/local/lib/python3.9/site-packages/nav/snmptrapd/trap.py", line 67, in _lookup_agent cur.execute( psycopg2.errors.InvalidTextRepresentation: invalid input syntax for type inet: "None" LINE 1: ... LEFT JOIN gwportprefix USING (interfaceid) WHERE 'None' IN ... ^ 2024-10-30 11:02:07,171 [ERROR] [zen.pynetsnmp.callback] Exception in _callback current transaction is aborted, commands ignored until end of transaction block Traceback (most recent call last): File "/usr/local/lib/python3.9/site-packages/pynetsnmp/netsnmp.py", line 464, in _callback sess.callback(pdu.contents) File "/usr/local/lib/python3.9/site-packages/nav/snmptrapd/agent_pynetsnmp.py ", line 221, in callback self._callback(addr, pdu) File "/usr/local/lib/python3.9/site-packages/nav/snmptrapd/agent_pynetsnmp.py ", line 130, in callback self._client_callback(trap) File "/usr/local/lib/python3.9/site-packages/nav/bin/snmptrapd.py", line 207, in trap_handler connection = getConnection('default') File "/usr/local/lib/python3.9/site-packages/nav/db/__init__.py", line 170, in getConnection _connection_cache.invalidate() File "/usr/local/lib/python3.9/site-packages/nav/__init__.py", line 55, in invalidate if self[key].is_invalid(): File "/usr/local/lib/python3.9/site-packages/nav/db/__init__.py", line 57, in is_invalid if self.ping(): File "/usr/local/lib/python3.9/site-packages/nav/db/__init__.py", line 77, in ping cursor.execute('SELECT 1') psycopg2.errors.InFailedSqlTransaction: current transaction is aborted, commands ignored until end of transaction block The incoming traps does not have any corresponding handler (yet), but I was expecting the code to handle unknown traps without barfing. --Ingeborg -- Ingeborg Østrem Hellemo -- ingeborg.hellemo(a)uit.no Dep. of Information Technology --- Univ. of Tromsø

3 7

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Nav-users