All auth HTTP Sites Fail
|
Logged in as: Guest
|
|
Users viewing this topic:
none
|
|
Login | |
|
All auth HTTP Sites Fail - 8.Jun.2005 7:30:00 AM
|
|
|
JoeDali
Posts: 7
Joined: 19.May2005
From: Denver
Status: offline
|
Whether its OWA or a simple IIS based login, nothing works for me.
Please let me know if there is a fix in the works or if I am doing something blatantly wrong.
Thanks
|
|
|
|
RE: All auth HTTP Sites Fail - 9.Jun.2005 4:01:00 AM
|
|
|
wstahn
Posts: 115
Joined: 26.Dec.2004
From: Hamburg/Germany
Status: offline
|
Is your NSM installed on the same machine as IIS?
|
|
|
|
RE: All auth HTTP Sites Fail - 10.Jun.2005 4:44:00 AM
|
|
|
JoeDali
Posts: 7
Joined: 19.May2005
From: Denver
Status: offline
|
No I have NSM installed on a completely different box.
|
|
|
|
RE: All auth HTTP Sites Fail - 15.Jun.2005 3:54:00 AM
|
|
|
blaster88
Posts: 16
Joined: 12.Jun.2005
From: McLean, VA
Status: offline
|
Make sure that you are using the same url for checking that the certificate uses. Put the check url in a browser, and if you get a popup box that says the certificate is invalid, it will fail a check.
|
|
|
|
RE: All auth HTTP Sites Fail - 27.Jun.2005 10:22:00 PM
|
|
|
masc2001
Posts: 23
Joined: 19.Jun.2005
Status: offline
|
I had the same effect. But I found out the following: When checking the availibility of an IIS-Site in my own network, intranet, no proxy, sometimes it works, sometimes not. It depends on the kind of file that is browsed, html or aspx. Files like http://servername/default.html = IT WORKS Files like http://servername/default.aspx = DON'T WORK. So when I had trouble to set up the HTTP-Check, I generate an own html-File in the root directory of the IIS-Site, and the check succeeds for this file. But this can't be the solution?! Any ideas?
|
|
|
|
RE: All auth HTTP Sites Fail - 28.Jun.2005 3:42:00 AM
|
|
|
JoeDali
Posts: 7
Joined: 19.May2005
From: Denver
Status: offline
|
I'm really beginning to question the reliability of this product. After installing the latest NSMEngine.exe yesterday I'm still getting no email alerts after rebooting several servers to test getting an ICMP failure email.
It appears I'm not the only one having these problems. Please GFI do some more rigorous testing of the product. Something is not right here. I think there is memory leak issues with all the unnecessary reboots I have to perform.
At least we are using MS MOM 2005 as a supplement. But I told my boss GFI was the best. I'm not so sure anymore.
|
|
|
|
RE: All auth HTTP Sites Fail - 4.Jul.2005 4:25:00 AM
|
|
|
Nicks
Posts: 2741
Joined: 17.Mar.2003
Status: offline
|
masc2001,
Did you already contact support on this issue. Network Server Monitor is waiting for a specific response from the server. It could be that the response that it is expcecint was not recieved, and the check will show as failed. Can you enable debug in Network Server Monitor and send us (support@gfi.com) a set of troubleshooting files:
a) Stop all the GFI Network Server Monitor services. b) Open Regedit (Start -> Run -> Type 'regedit' and press Enter) c) Browse to [HKEY_LOCAL_MACHINE\SOFTWARE\GFI\NSM6\Config] d) Change the 'debug' dword value from '0' to '1' e) Restart the services stopped in (a) f) Reproduce the problem. g) If the problem persists, send me a new set of trouble shooter files. Please delete the support directory, re-run the trouble shooter application, zip up and resend me the generated files.
JoeDali,
The last post in this thread is not really related to the rest of the thread. Can you please open a new thread for that.
Thank you.
|
|
|
|
RE: All auth HTTP Sites Fail - 4.Jul.2005 5:50:00 AM
|
|
|
RayPesek
Posts: 246
Joined: 7.May2004
Status: offline
|
"Files like http://servername/default.html = IT WORKS
Files like http://servername/default.aspx = DON'T WORK."
I don't see how it could ever work with a dynamic content file. A dynamic content file, like .asp and its variants, is compiled by the web server software when a browser accesses it into the content rendered by your browser.
.asp* files can contain parameters, like user names and passwords to login to a backend database, so they must never be accessed directly. Think of them as the source code of a program that is compiled into the .exe file you actually run.
If NSM could access the .asp* file directly, then it would be possible for a hacker to do the same and see the source code that is creating the page, along with embedded credentials. The web server itself is what prevents (hopefully) anyone or anything from accessing the source file directly.
Your workaround is the only way to make it work that I can see.
Ray
|
|
|
|
RE: All auth HTTP Sites Fail - 4.Jul.2005 10:53:00 PM
|
|
|
masc2001
Posts: 23
Joined: 19.Jun.2005
Status: offline
|
nicks, thanks for your interest; I'll send the support files.
RayPesek, thanks for thinking about my post. I'll try to live with my little workaround. But a lot of web servers (e.g. Exchange web access, Sharepoint portal servers) do not have html start pages but active server pages as start page. It's not satisfying that it seems that there is no easy connectivity check possible (without my workaround), especially because the browser on the server where NSM is installed can contact the site without any problems. If there is any result from sending my support files, I promise to post here.
|
|
|
|
RE: All auth HTTP Sites Fail - 5.Jul.2005 2:24:00 PM
|
|
|
RayPesek
Posts: 246
Joined: 7.May2004
Status: offline
|
Another check, since you're just looking for whether the server is serving up pages, would be to test for the presence of a robots.txt file. If you don't have one, create a text file named "robots.txt" in the root of the site and paste these two lines into it:
User-agent: * Disallow: /
It's a (voluntary) directive to search engines asking them not to index any of the pages on the site. I keep it on all of my employee-only sites.
Ray
|
|
|
|
RE: All auth HTTP Sites Fail - 5.Jul.2005 11:41:00 PM
|
|
|
masc2001
Posts: 23
Joined: 19.Jun.2005
Status: offline
|
thanks, good idea. The problem is, I've got not enough rights to add files in the root directory of every web server that I need to monitor. And the robots.txt doesn't exist there.
|
|
|
|
RE: All auth HTTP Sites Fail - 6.Jul.2005 6:28:00 PM
|
|
|
blaster88
Posts: 16
Joined: 12.Jun.2005
From: McLean, VA
Status: offline
|
I am using v6, and I check .aspx pages all the time.
masc2001, how do you have your check configured? Are you going for availability, or doing a content check?
I did have a problem doing content checking on an .aspx page, and it was the result of improper coding in the .aspx page - the text was rendered outside of the html tags, so NSM couldn't see it. Got the developer to fix the page, and it worked fine.
|
|
|
|
RE: All auth HTTP Sites Fail - 6.Jul.2005 6:41:00 PM
|
|
|
blaster88
Posts: 16
Joined: 12.Jun.2005
From: McLean, VA
Status: offline
|
quote: Originally posted by JoeDali: I'm really beginning to question the reliability of this product. After installing the latest NSMEngine.exe yesterday I'm still getting no email alerts after rebooting several servers to test getting an ICMP failure email.
It appears I'm not the only one having these problems. Please GFI do some more rigorous testing of the product. Something is not right here. I think there is memory leak issues with all the unnecessary reboots I have to perform.
At least we are using MS MOM 2005 as a supplement. But I told my boss GFI was the best. I'm not so sure anymore.
For testing, why not create some checks that don't require you to reboot servers? That's painful.
If it has to be an ICMP check, assign a second IP address to a server, create a check for it, then delete the ip from the server. That will fail the check, for sure, and if the mail is configured, it should go. But just do something simpler, and non-destructive, like a file existence check, and make sure the interval is short and 1 failed check goes to a failed state. That way you don't have to wait around. Plus, if you are taking the default options on a check - 2 minute check interval, 3 errors to failure, then you looking at 6 minutes to failure - if the machine completes the reboot in that time period, it may never fail, and it won't send an email.
Does your email work when you send a test message from the Alerting Options properties?
|
|
|
|
RE: All auth HTTP Sites Fail - 6.Jul.2005 10:10:00 PM
|
|
|
masc2001
Posts: 23
Joined: 19.Jun.2005
Status: offline
|
AvAdmin, this is interesting for me to got to know. See the post from RayPasek (Juli 04) who says this maybe wouldn't be possible. I am using V6 too. And I only do an simple availibilty check. Now I'm still waiting for the response of GFi's support... Don't you have any problems with availibility checks to Outlook Web Access pages or Share Point Portal Server pages? Nothing works for me. Only "normal" html-pages on an IIS.
|
|
|
|
RE: All auth HTTP Sites Fail - 7.Jul.2005 12:35:00 AM
|
|
|
blaster88
Posts: 16
Joined: 12.Jun.2005
From: McLean, VA
Status: offline
|
Well, it is possible, I do it. However, I don't check OWA or SharePoint, so I don't know that can be done for sure. OWA should be doable. See my Post #4 above - make sure you can do the check on your own in a browser. Anything that causes a popup message will likely fail the check - like if you have a banner message, or an invalid certificate (if its https)
|
|
|
|
New Messages |
No New Messages |
Hot Topic w/ New Messages |
Hot Topic w/o New Messages |
Locked w/ New Messages |
Locked w/o New Messages |
|
Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|
|