Authentication Blues

[Jeremy Russell]

Weird! That's the same module I'm using, and compiled it as a shared module, just as you.  Well  I had to statically link glibc because I'm running Solaris and the /usr/ccs/bin/ld doesn't get along well with glib.  But it works; it just doesn't populate the REMOTE_USER var for me...  At least I don't think it did, maybe it did and I'm smoking crack! :)   Anyways, that works fine, I just and dreaming big I guess about Single Sign On, :)

It does work, I am smoking crack.  I just didn't have my .htaccess in the directory for nagios.  I had it in a separate dir trying to emulate Single Sign On.  

However, I'm still searching. :)  Somebody has had to do it at some point in time!  Anyways, if v3 comes out in php like it is being talked about, my methods may be quite useful!

Thanks.

Jeremy (The big Single Sign On Dreamer) :)

-----Original Message-----
From: bauchi [mailto:lists at bauchi.de] 
Sent: Wednesday, March 26, 2003 12:43 PM
To: Jeremy Russell
Cc: nagios-users at lists.sourceforge.net
Subject: Re[2]: [Nagios-users] Authentication Blues

hi Jeremy Russell,

Mittwoch, 26. März 2003 / 18:55 you wrote..

JR> Ya, I used mod_auth_ldap  The only deal is I have a lot more scripts and
JR> I didn't wanted to use the local stuff,  so there would be only one
JR> login,  I also wanted to give the option of logging in or not, so other
JR> users could see but not touch, if you know what I mean.  
single sign on is a dream of every admin ...
but maybe someday it'll come true ;)

JR> What version of mod_auth_ldap are you using, the one I'm using only
JR> populates the LDAP_USER variable anyways, and I'd have to hack it to get
JR> it to load REMOTE_USER.I don't know. Maybe I'll end up using the
JR> mod_auth_ldap after all. I Just wanted more of a seamless integration.
JR> I'll hold out a little longer before I give up though.  Thanks for the
JR> reply!

i'm using the actual version from muquit.com (2.4.1)
http://www.muquit.com/muquit/software/mod_auth_ldap/mod_auth_ldap.tar.gz
i didn't include it as a static compiled mod to my apache because i
had some trouble with it this way..

i've made a dso for apache just like it was mentioned on the website:
/usr/local/apache/bin/apxs -I/usr/local/include -L/usr/local/lib -lldap -llber -i -a -c mod_auth_ldap.c

and everything worked out as expected :)

here's how i've proteced the directory ... taken from the virtualhost
context:

...
<Directory  "/usr/local/nagios" >
        AuthName "Nagios... plese authenticate "
        AuthType Basic
        LDAP_Server 127.0.0.1 #<--- running stunnel to the nds
        LDAP_Port 14000  #<--- running stunnel to the nds
        Base_DN "o=sskm"
        UID_Attr cn
        require valid-user
        Options None
        AllowOverride All
</Directory>

hope that helps

-- 
"In god we trust, the rest we monitor"
mailto:lists at bauchi.de




-------------------------------------------------------
This SF.net email is sponsored by:
The Definitive IT and Networking Event. Be There!
NetWorld+Interop Las Vegas 2003 -- Register today!
http://ads.sourceforge.net/cgi-bin/redirect.pl?keyn0001en
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null