CGI authentication makes me mad

[Tristan-Matthieu Robichaud]

Hi dude,

On Tue, 2003-08-12 at 20:09, garrick wrote:
> Your symptoms appear to be related to nagios' authorization process, but
> you are siting apache authentication configurations.  Those are two very
> differnent things.
> 
> Does your web browser prompt you for a password?  If so, does it let you
> in after entering a correct user/pass?  If yes, then apache and
> authentication is setup correctly and your problem is a nagios config
> issue.  If no, then authentication is still not working (nagios does not
> do authentication, only authorization).

Yes it does work. The browser prompts me with an auth box asking for
username/password combo, then accepts it and loads the Nagios interface.

> Does nagios show your username in the upper left grey box in the
> "Tactical Overview" page?  If so, then nagios knows who you are and
> you've been authenticated.

Yes it does. I created 2 similar users with same perms, nagios and
nagiosadmin. Both logs in correctly and appears as logged on in the
Tactical Overview page.

>   Does the apache user have read access to the
> various files in /usr/share/nagios?

Apparently yeah because if it were not, no page would load, neither HTTP
or CGI. 

I really think the problem is somewhere in Nagios config. As i stated
previously, I'm really surprised to keep getting this error message even
after I squarely disabled CGI auth in cgi.cfg. Anyway, same result, same
error message.

Thanks a lot

TMR


> On Tue, Aug 12, 2003 at 07:04:25PM -0400, Tristan-Matthieu Robichaud alleged:
> > Hi peepz,
> > 
> > Please ignore the subject's sarcastic remark, I really have a hard time
> > making Nagios's web interface CGI auth work. And maby I'm just a little
> > bit flustered about the absence of a functionnal forum, and also when I
> > discovered that the mailing list archives on SF.net seems to be broken.
> > 
> > I scupulously read the docs, did my homeworks, got rid of most error
> > messages. I have a rather good knowledge of CGI and Apache server
> > config, wich have also been scrupulously followed from the Nagios docs.
> > After a few days of tremendous efforts, I did'nt find any one that could
> > help me on this one, or any related documentation. 
> > 
> > Here's the prob. The htaccess auth works fine, but once logged in, it
> > still complains with the standard "It appears as through you do not have
> > permission to view information..." followed by the much more standard
> > "If you believe this is an error (of course i do!), check the HTTP
> > server requirements for accessing this CGI (yeah right) and check the
> > authorization options in your CGI configuration file). On this subject,
> > if I turn off this darn CGI authentication in cgi.cfg, shoudn't Nagios
> > allow me to view every hosts? Well it doesnt. 
> > 
> > Nagios version is 1.1 (Debian packaged, if that's any help) turning on a
> > freshly updated Debian "unstable" installation. Apache is 1.3.27 and
> > works fine and all. 
> > 
> > here's my apache.conf
> > 
> > ScriptAlias /cgi-bin/nagios /usr/lib/cgi-bin/nagios
> > ScriptAlias /nagios/cgi-bin /usr/lib/cgi-bin/nagios
> > <DirectoryMatch /usr/lib/cgi-bin/nagios/>
> > 	Options ExecCGI
> > 
> > 	AllowOverride AuthConfig
> > 	order allow,deny
> > 	Allow From All
> > 
> > 	AuthName "Nagios Access"
> > 	AuthType Basic
> > 	AuthUserFile /etc/nagios/htpasswd.users
> > 	require valid-user
> > </DirectoryMatch>
> > 
> > Alias /netsaint /usr/share/nagios/htdocs/
> > Alias /nagios /usr/share/nagios/htdocs/
> > <DirectoryMatch /usr/share/nagios/htdocs/>
> > 	Options FollowSymLinks
> > 
> > 	AllowOverride AuthConfig
> > 	Order Allow,Deny
> > 	Allow From All
> > 
> > 	AuthName "Nagios Access"
> > 	AuthType Basic
> > 	AuthUserFile /etc/nagios/htpasswd.users
> > 	require valid-user
> > </DirectoryMatch>
> > 
> > Anyone have a slight idea of what could be slipping my mind?
> > 
> > thanks
> > 
> > -- 
> > Tristan-Matthieu Robichaud <tmr at iscream.net>
> > iScream.NET
> > 
> > 
> > 
> > -------------------------------------------------------
> > This SF.Net email sponsored by: Free pre-built ASP.NET sites including
> > Data Reports, E-commerce, Portals, and Forums are available now.
> > Download today and enter to win an XBOX or Visual Studio .NET.
> > http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
> > _______________________________________________
> > Nagios-users mailing list
> > Nagios-users at lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/nagios-users
> > ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
> > ::: Messages without supporting info will risk being sent to /dev/null
> > 
> 
> 
> -------------------------------------------------------
> This SF.Net email sponsored by: Free pre-built ASP.NET sites including
> Data Reports, E-commerce, Portals, and Forums are available now.
> Download today and enter to win an XBOX or Visual Studio .NET.
> http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
> _______________________________________________
> Nagios-users mailing list
> Nagios-users at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nagios-users
> ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
> ::: Messages without supporting info will risk being sent to /dev/null
-- 
Tristan-Matthieu Robichaud <tmr at iscream.net>
iScream.NET



-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null