20. 01. 2025 Tobias Goller NetEye

Icinga Director Self Service API Not Working After Keycloak Activation

After updating to NetEye version 4.38 and activating authentication via Keycloak, the Icinga Director Self Service API no longer works.

For instance if you install the Icinga agents using a Powershell script that automatically creates the host objects in the Icinga Director when it’s called, then this process will no longer work.

That means you can no longer roll out new agents using this procedure. Until this error is fixed, you must use the following workaround, which involves changing the authentication method in the file /usr/share/icingaweb2/modules/neteye/library/Neteye/Authentication/OAuthBackend.php by adding these four lines:

public function authenticate(User $user, $password = null){
    // Start workaround
    $currentPath = parse_url($_SERVER['REQUEST_URI'], PHP_URL_PATH);
    if (strpos($currentPath, '/neteye/director/self-service') === 0) {
        return false;
    }
    // End workaround

    // Skip the backend if the user is already authenticated
    $auth = Auth::getInstance();
    if ($auth->getUser() !== null) {
    …

If you have a NetEye cluster system, you must make this change on all master nodes. After this change, you don’t need to restart any services.

The resolution of this problem should be available in the next few weeks via a NetEye update.

Tobias Goller

Tobias Goller

NetEye Solution Architect at Würth Phoenix
I started my professional career as a system administrator. Over the years, my area of responsibility changed from administrative work to the architectural planning of systems. During my activities at Würth Phoenix, the focus of my area of responsibility changed to the installation and consulting of the IT system management solution WÜRTHPHOENIX NetEye. In the meantime, I take care of the implementation and planning of customer projects in the area of our unified monitoring solution.

Author

Tobias Goller

I started my professional career as a system administrator. Over the years, my area of responsibility changed from administrative work to the architectural planning of systems. During my activities at Würth Phoenix, the focus of my area of responsibility changed to the installation and consulting of the IT system management solution WÜRTHPHOENIX NetEye. In the meantime, I take care of the implementation and planning of customer projects in the area of our unified monitoring solution.

Leave a Reply

Your email address will not be published. Required fields are marked *

Archive