Authentication Blues

bauchi lists at bauchi.de
Wed Mar 26 18:45:42 CET 2003


JR> Hello list!
JR>             I have a challenge, what's going on is this.  I want to use
JR> the CGI auth mechanism but I don't want to use apache's built in auth
JR> stuff (even mod_auth_ldap).  I actually have a PHP script that
JR> authenticates users against an Active Directory server.  Is there any
JR> way to make the CGI's work with this.  I've tried a few things so far
JR> but havn't had any really good results. 
errmm.. why don't you like mod_auth_ldap, did it not work for you ?
we use it for authentication against netscape ldap and novell e-directory and
everything works really smooth .. (our nagios webserver itself
authenticates against novell e-dir over a tls encrypted connection)
the crappy active directory shouldn't be a problem for mod_auth_ldap

JR> First I tried the apache_setenv for php, tried to set the REMOTE_USER
JR> variable.  No worky worky, not sure if I used correctly or not,  haven't
JR> been able to find docs for it.
nice try, but effectless as the variable will only be filled with your
value while running the php file .. no longer :-(

JR> Next I tried to edit the auth.c library for Nagios itself.  It pulls the
JR> user from the REMOTE_USER using apaches libs, so I thought I would user
JR> a different variable name,  but I then figured out I still don't know
JR> how I would populate the environment variable.  

JR> The only thing I know of now is to really butcher the auth library for
JR> Nagios.  I guess I could maybe also write a C program to run from the
JR> script to populate the environment variable, another option is maybe to
JR> use mod_rewrite(??)  But I'm not sure how.
i don't have any idea how you could use mod_rewrite...

if you use apache2 you could help yourself with some kind of input
filter which set's the env var's, i've never done this myself, just
read about the powerful input filters of apache2

[snip]

-- 
"In god we trust, the rest we monitor"
mailto:lists at bauchi.de




-------------------------------------------------------
This SF.net email is sponsored by:
The Definitive IT and Networking Event. Be There!
NetWorld+Interop Las Vegas 2003 -- Register today!
http://ads.sourceforge.net/cgi-bin/redirect.pl?keyn0001en
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null





More information about the Users mailing list