mod_authz_LDAP nagios CGI authentication

[Michael Medin]

Hi,

I solved this using an option (cant recall which one of the top of my 
head) that strips away the everything but the short username. From the 
header that is given to Nagios thus you only enter the common name and 
nothing else in the nagios configuration file. This is a workaround so 
if your users clash and such it might not be what you want, but as we 
only have a limited userbase that has access to nagios it worked for us.

// Michael Medin

Glen Dosey wrote:

>I have a question regarding CGI authentication in Nagios. On RedHat
>Apache is configured with mod_authz_ldap. Users authenticate to Apache
>against the LDAP server and Apache returns the authenticated user's
>name. The returned value is the user's DN in the form of
>cn=username,o=context . How can I enter this into the cgi.cfg file for
>the username ?
>
>The documented format is
>authorized_for_all_service_commands=<user1>,<user2>
>
>How can I enclose the username 'cn=username,o=context'  for the value of
><user1> ? I've already tried enclosing it in quotes.
>
>Thanks, 
>
>
>PS. if someone on the list knows how to make mod_authz_ldap only return
>the users cn or uid, that would also solve this for me.
>
>  
>



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null