[BULK SPAM] using LDAP-based user authenticat ion

[CWaters at jeld-wen.com]

I am using authz_ldap and don't seem to have that problem.  Can you show the
config for your module?  What is your LDAP store???  AD,OpenLDAP...I am
authenticating my users against an M$ Active Directory.  Works pretty well.
I would include your .htaccess code as well.  That way we can compare them
to known working configs.


Chris Waters 
WAN/LAN Technician
JELD-WEN, Inc. 
Network Services Group 
===================


-----Original Message-----
From: nagios-users-admin at lists.sourceforge.net
[mailto:nagios-users-admin at lists.sourceforge.net] On Behalf Of Jeff Rattray
Sent: Thursday, December 08, 2005 12:26 PM
To: nagios-users at lists.sourceforge.net
Subject: [BULK SPAM] [Nagios-users] using LDAP-based user authentication
Importance: Low

Greetings, everyone.  We (Purdue College of Pharmacy, Nursing and Health
Sciences) have been using nagios for half of a year now, and it has been
really handy.  Currently, we are trying to change the way nagios
authenticates users.  
Purdue has implemented a new security policy that says that all passwords,
whatever they are for, must be changed every 30 days.  Leaving aside the
difficulties about changing, say, BIOS passwords in the student labs, we are
trying to reduce the number of usernames and passwords that we have to make
it easier to keep up with the password-changing requirement.

I have successfully configured mod_authz_ldap to handle authentication on
our nagios server, and I can log into the nagios pages.  Unfortunately,
instead of returning a simple username like 'jrattray', the CGIs see my
username as 'uid=jrattray,ou=people,o=pnhs.purdue.edu' .  I cannot authorize
myself to see any information, because when I put that string into cgi.cfg,
nagios breaks it up at the commas into 3 different users.  (The equals signs
may be confusing it
also.)

Here are my questions:

(1) Does anyone know how to escape this username so that it works in
cgi.cfg?  
I have tried entering it as a quoted string, putting slashes in front of the
commas, etc.

(2) Failing that, has anyone had any experience using nagios with
mod_auth_ldap?  I used mod_authz_ldap (a third-party product) only because
it came with Red Hat EL, but I don't want to bother compiling the official
apache module if it does exactly the same thing.

(3) Failing THAT, how does one submit this to the wish list for nagios?

Thanks,
Jeff Rattray
--
Jeff Rattray, Ph.D.
Manager, Web-based Instructional Technology Purdue University College of
Pharmacy, Nursing and Health Sciences



-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting
any issue. 
::: Messages without supporting info will risk being sent to /dev/null


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null