Nav-users

nav-users@lister.sikt.no

1379 discussions

Nav Django exposing Username/Password in error case
by Mischa Diehm 26 Mar '14

26 Mar '14

Hi, I was playing around with ldap/AD integration and got this errorreport mailed to our NOC-Group (see below) - this mail leaks my username/password in cleartext. I think this should really be avoided for any case happening! I don't have a clue about django but a quick search showed me this: https://docs.djangoproject.com/en/dev/howto/error-reporting/ Especially interesting might be this part: ... Filtering sensitive information <https://docs.djangoproject.com/en/dev/howto/error-reporting/#filtering-sens itive-information> Error reports are really helpful for debugging errors, so it is generally useful to record as much relevant information about those errors as possible. For example, by default Django records the full traceback <http://en.wikipedia.org/wiki/Stack_trace> for the exception raised, each traceback frame <http://en.wikipedia.org/wiki/Stack_frame> ¹s local variables, and the HttpRequest <https://docs.djangoproject.com/en/dev/ref/request-response/#django.http.Htt pRequest> ¹s attributes <https://docs.djangoproject.com/en/dev/ref/request-response/#httprequest-att ributes> . However, sometimes certain types of information may be too sensitive and thus may not be appropriate to be kept track of, for example a user¹s password or credit card number. So Django offers a set of function decorators to help you control which information should be filtered out of error reports in a production environment (that is, where DEBUG <https://docs.djangoproject.com/en/dev/ref/settings/#std:setting-DEBUG> is set to False): sensitive_variables() <https://docs.djangoproject.com/en/dev/howto/error-reporting/#django.views.d ecorators.debug.sensitive_variables> and sensitive_post_parameters() <https://docs.djangoproject.com/en/dev/howto/error-reporting/#django.views.d ecorators.debug.sensitive_post_parameters> . ... I wonder if than can be integrated for NAV or if there is another way to get around exposure like that? Mischa Original mail we became for django error: ---- Traceback (most recent call last): File "/usr/lib/python2.7/dist-packages/django/core/handlers/base.py", line 111, in get_response response = callback(request, *callback_args, **callback_kwargs) File "/usr/lib/pymodules/python2.7/nav/web/webfront/views.py", line 89, in login return do_login(request) File "/usr/lib/pymodules/python2.7/nav/web/webfront/views.py", line 122, in do_login account = auth.authenticate(username, password) File "/usr/lib/pymodules/python2.7/nav/web/auth.py", line 95, in authenticate auth = ldapauth.authenticate(username, password) File "/usr/lib/pymodules/python2.7/nav/web/ldapauth.py", line 120, in authenticate lconn = open_ldap() File "/usr/lib/pymodules/python2.7/nav/web/ldapauth.py", line 76, in open_ldap server = _config.get('ldap', 'server') File "/usr/lib/python2.7/ConfigParser.py", line 618, in get raise NoOptionError(option, section) NoOptionError: No option 'server' in section: 'ldap' <WSGIRequest path:/index/login/, GET:<QueryDict: {}>, POST:<QueryDict: {u'origin': [u''], u'username': [u'diehm-adm'], u'password': [u'godDamnitDjango']}>, COOKIES:{'sessionid': 'd660941ae6b821799dbb47ed41d47009'}, META:{'CONTENT_LENGTH': '52', 'CONTENT_TYPE': 'application/x-www-form-urlencoded', 'DOCUMENT_ROOT': '/usr/share/nav/htdocs', 'GATEWAY_INTERFACE': 'CGI/1.1', 'HTTPS': '1', 'HTTP_ACCEPT': 'text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8', 'HTTP_ACCEPT_ENCODING': 'gzip, deflate', 'HTTP_ACCEPT_LANGUAGE': 'de,en-us;q=0.7,en;q=0.3', 'HTTP_CONNECTION': 'keep-alive', 'HTTP_COOKIE': 'sessionid=d660941ae6b821799dbb47ed41d47009', 'HTTP_DNT': '1', 'HTTP_HOST': 'urz-nav-pet.urz.unibas.ch', 'HTTP_REFERER': 'https://urz-nav-pet.urz.unibas.ch/index/login/', 'HTTP_USER_AGENT': 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:28.0) Gecko/20100101 Firefox/28.0', 'PATH_INFO': u'/index/login/', 'PATH_TRANSLATED': '/usr/share/pyshared/nav/wsgi.py/index/login/', 'QUERY_STRING': '', 'REMOTE_ADDR': '131.152.2.16', 'REMOTE_PORT': '59503', 'REQUEST_METHOD': 'POST', 'REQUEST_URI': '/index/login/', 'SCRIPT_FILENAME': '/usr/share/pyshared/nav/wsgi.py', 'SCRIPT_NAME': u'', 'SERVER_ADDR': '131.152.2.216', 'SERVER_ADMIN': 'webmaster@localhost', 'SERVER_NAME': 'urz-nav-pet.urz.unibas.ch', 'SERVER_PORT': '443', 'SERVER_PROTOCOL': 'HTTP/1.1', 'SERVER_SIGNATURE': '<address>Apache/2.2.22 (Debian) Server at urz-nav-pet.urz.unibas.ch Port 443</address>\n', 'SERVER_SOFTWARE': 'Apache/2.2.22 (Debian)', 'SSL_TLS_SNI': 'urz-nav-pet.urz.unibas.ch', 'mod_wsgi.application_group': 'urz-nav-pet.urz.unibas.ch|', 'mod_wsgi.callable_object': 'application', 'mod_wsgi.handler_script': '', 'mod_wsgi.input_chunked': '0', 'mod_wsgi.listener_host': '', 'mod_wsgi.listener_port': '443', 'mod_wsgi.process_group': 'NAV', 'mod_wsgi.request_handler': 'wsgi-script', 'mod_wsgi.script_reloading': '1', 'mod_wsgi.version': (3, 3), 'wsgi.errors': <mod_wsgi.Log object at 0x7fa322859430>, 'wsgi.file_wrapper': <built-in method file_wrapper of mod_wsgi.Adapter object at 0x7fa3228655d0>, 'wsgi.input': <mod_wsgi.Input object at 0x7fa3210d6eb0>, 'wsgi.multiprocess': True, 'wsgi.multithread': True, 'wsgi.run_once': False, 'wsgi.url_scheme': 'https', 'wsgi.version': (1, 1)}> -- Mischa Diehm | Network Operations Center (NOC) UniBasel | UniRechenZentrum (URZ) Klingebergstr. 70 | CH-4056 Basel Tel. +41 61 267 1574 | http://urz.unibas.ch

2 1

New to nav system
by martin.jaburek＠cah.cz 26 Mar '14

26 Mar '14

Hello, I just installed nav system from source, so I have 4.0b5 up and running. I tried so far only few Cisco boxes of these two types - Catalyst 6504 - Catalyst 4506 Even on these I'm unable to obtain software version, modules etc. It shows serial numbers and ports (but not switch ports or router ports) I tried to find out, how to troubhleshoot the proces, but nothing was usefull. Can you please advise me, what can I do to make it work? brgds Mat

4 10

navcron powersupplywatch.py
by Mischa Diehm 25 Mar '14

25 Mar '14

Hi, I have a problem with /usr/lib/nav/powersupplywatch.py: I get the following error runninng this script as user navcron: [2014-03-24 18:11:51,243] [DEBUG] Allocate SNMP-handle for cat-XXX-vl-742.pz.p.unibas.ch [2014-03-24 18:11:51,244] [DEBUG] Polling cat-XXX-vl-742.pz.p.unibas.ch: WS-C2960G-8TC-L - Power Supply 0 [2014-03-24 18:11:51,244] [DEBUG] Stored state = Unknown; polled state = Unknown [2014-03-24 18:11:51,247] [DEBUG] Allocate SNMP-handle for cat-XXX-vl-742.pz.p.unibas.ch snmp_open: Unknown host (10.XX.XX.186:161) [2014-03-24 18:11:51,247] [ERROR] snmp_open: Unknown host (10.XX.XX.186:161) Traceback (most recent call last): File "/usr/lib/nav/powersupplywatch.py", line 390, in <module> File "/usr/lib/nav/powersupplywatch.py", line 174, in main File "/usr/lib/nav/powersupplywatch.py", line 244, in check_psus_and_fans File "/usr/lib/nav/powersupplywatch.py", line 275, in get_snmp_handle File "/usr/lib/pymodules/python2.7/nav/Snmp/pynetsnmp.py", line 66, in __init__ File "/usr/lib/pymodules/python2.7/pynetsnmp/netsnmp.py", line 421, in open pynetsnmp.netsnmp.SnmpError: snmp_open NAV can actually poll the device with snmp. When I delete the device, the next device in the list will fail. It's always device No. 1020 (see below) root@urz-nav-pet:~# sudo -u navcron /usr/lib/nav/powersupplywatch.py -v -d 2>&1| grep Alloc | wc -l 1020 We run Debian 7.4 with root@urz-nav-pet:~# dpkg -l | grep nav ii nav 2+3.15.6-2 all Network Administration Visualized any ideas? -- Mischa Diehm | Network Operations Center (NOC) UniBasel | UniRechenZentrum (URZ) Klingebergstr. 70 | CH-4056 Basel Tel. +41 61 267 1574 | http://urz.unibas.ch

2 1

Migration to new NAV version
by Mischa Diehm 05 Mar '14

05 Mar '14

Hi, we migrated our installation to a new HW and Debian stable (3.14.15-1 -> 3.15.5-1). I got all dump.py data migrated without problems. Now we got a lot of User Accounts and Groups with a lot of different Privilidges attached to them. Is there also a (painless) way of transforming this data into the new installation? Thanks in advance! Mischa -- Mischa Diehm | Network Operations Center (NOC) UniBasel | UniRechenZentrum (URZ) Klingebergstr. 70 | CH-4056 Basel Tel. +41 61 267 1574 | http://urz.unibas.ch

2 1

Hardware recommendation
by Mischa Diehm 05 Mar '14

05 Mar '14

Hi, first of all welcome to the list! we (UniBasel) use NAV for quite some while now and are very pleased with the possibilities NAV gives us. We use Debian as OS with the following Setup: root@urz-nav:~# uname -a Linux urz-nav 2.6.32-5-amd64 #1 SMP Fri May 10 09:44:53 UTC 2013 x86_64 GNU/Linux root@urz-nav:~# cat /etc/debian_version 6.0.7 root@urz-nav:~# dpkg -l | grep nav ii nav 2+3.14.15-1 Network Administration Visualized A problem we have since a while is that our system is permanently under a lot of load (mostly CPU bound) and we haven't really found a way to reduce the pressure. The hardware we use is a hp blade (ProLiant BL460c G6) with: Intel(r) Xeon(r) Processor X5550 (4 Cores/ 8 Threats) (8M Cache, 2.66 GHz, 6.40 GT/s Intel(r) QPI) and: root@urz-nav:~# free total used free shared buffers cached Mem: 12321700 11673596 648104 0 387768 9123748 At the moment we have 1460 active Devices (mainly Cisco Switches). Around 30 or 40 are OVERDUE in: https://urz-nav/report/lastupdated So my question is, do you have any good experience with HW-systems that are actually dealing with this amount of devices or is there any tuning possibility (without losing functionality) we could try to reduce the pressure on the system? Thanks in advance, Mischa Diehm -- Mischa Diehm | Network Operation Center (NOC) Universitaet Basel | Universitaetsrechenzentrum Klingelbergstr. 70 | CH-4056 Basel | Switzerland Tel. +41 61 267 15 74 | Fax +41 61 267 22 82 | http://urz.unibas.ch

5 10

Announcement: NAV 4.0 beta 5 released
by Morten Brekkevold 03 Mar '14

03 Mar '14

The fifth beta release of the NAV 4.0 series is now available for download at Launchpad: https://launchpad.net/nav/4.0/4.0b5 Here's the changelog summary of today's release: Bugfixes: * Fixed various bugs around the web interface, introduced in previous releases. User-visible features and improvements: * Graph widget now has editable title. Default value is taken from from the displayed graph. * Make global graph controls float on top of viewport when scrolling on a page with heaps of port metrics. * Added the much sought-after button to clear link alerts from the status page. * Front page widgets can now be re-ordered by dragging their anchor icon; the re-order mode button has been removed. * "Add widget" button on the front page was moved to a sliding menu, accessible from the plus icon on the right hand side of the screen. A Debian package has been uploaded to our APT repository. We will likely build and upload a new version of the virtual appliance later today. Please note that there was a problem with the previous version of the appliance, which was reported to us and fixed today. As usual, please report bugs at https://launchpad.net/nav/+filebug . Happy beta-NAVing everyone! -- Morten Brekkevold UNINETT AS

1 0

NAV 4.0 Improved graph presentation
by John-Magne Bredal 26 Feb '14

26 Feb '14

Hi, we have written about how NAV 4.0 will improve the graph presentation. Read more about this and other NAV things on our blog - blog.nav.uninett.no Also - if you want to test the beta version of NAV 4 feel free to download the virtual applicance. It can be downloaded at https://nav.uninett.no/navappliance -- John-Magne Bredal UNINETT AS

1 0

Announcement: NAV 4.0 beta 4 released
by Morten Brekkevold 20 Feb '14

20 Feb '14

The fourth beta release of the NAV 4.0 series is now available for download at Launchpad: https://launchpad.net/nav/4.0/4.0b4 Here's the changelog summary of today's release: User-visible features and improvements: * A port metrics tab has been added to IP Device Info, so that all port graphs are available on a single page (just like you're used to from Cricket). * Sub-tabs in IP Device Info are now hyperlinkable. * Portadmin UI has been reworked again, based on feedback from NTNU. * All users are now presented with a "NAV tour" widget on their front page, which will give an interactive tour of the functionality on the new front page. * Introduced widget for displaying the contents of `welcome-anonymous.txt` and `welcome-registered.txt`, as was always present on the NAV 3 front page. * Introduced button to add any graph displayed in NAV to your front page widget dashboard. * CPU stats from HP devices are now included in ranked CPU statistics. * New button in ranked statistics to switch between regular graph and pie chart. * Improved titles, legends and display of various graphs. * Removed obsolete Adobe Flash component that was used to facilitate CSV export of the room switch port view. A Debian package has been uploaded to our APT repository. We will likely build and upload a new version of the virtual appliance later today. As usual, please report bugs at https://launchpad.net/nav/+filebug . Happy beta-NAVing everyone! -- Morten Brekkevold UNINETT AS

1 0

Announcement: NAV 3.15.6 released
by Morten Brekkevold 20 Feb '14

20 Feb '14

The sixth maintenance release of the NAV 3.15 series is now available for download at Launchpad: https://launchpad.net/nav/3.15/3.15.6 This release fixes 3 reported issues: * LP#1274406 (Power Supply status is not correct) * LP#1278433 (Link to alert profiles permissions is missing) * LP#1279748 (Malformed timestamps cause internal crash in activeip API call, instead of proper error message) Please report further bugs at https://launchpad.net/nav/+filebug A binary package for Debian Wheezy has been made available in our APT repository, as usual. Happy NAVing everyone! -- Morten Brekkevold UNINETT AS

1 0

Announcement: NAV 4.0 beta 3 released
by Morten Brekkevold 06 Feb '14

06 Feb '14

The third beta release of the NAV 4.0 series is now available for download at Launchpad: https://launchpad.net/nav/4.0/4.0b3 I'm also happy to report that the Norwegian University of Science and Technology and the University of Agder have both signed on as beta testers using the virtual appliance. Here's the changelog summary of today's release: Bugfixes: * LP#1270095 (APC sensors stored at wrong precision) * All VLAN utilization graphs produced error messages in b2. User-visible features and improvements: * Inserted the new NAV logo, and completely reworked the page footer. * New NAV blog feed widget added as default. * UI clean-ups and improvements in front page widgets, login page, Geomap, SeedDB, Messages, PortAdmin, Radius, Syslog Analyzer, IP Device Info, room photo database, personal preferences page and others. * Fixed Internet Explorer 9 brokenness. * Tool descriptions have been completely re-authored, and are now also available as a subheading inside each tool. A Debian package has been uploaded to our APT repository. We have not yet built a new virtual appliance, but you can upgrading your existing one using the regular apt-get route. The updated package introduces a dependency to `python-feedparser`, so you may need to either use 'apt-get dist-upgrade' or 'apt-get install nav' to force an upgrade of the nav package (after issuing 'apt-get update', of course). As usual, please report bugs at https://launchpad.net/nav/+filebug . Happy NAVing everyone! -- Morten Brekkevold UNINETT AS

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Nav-users