CGI accesss issue

Arnold Wang arnold.wang at inovis.com
Wed Mar 30 01:04:02 CEST 2005


I found the problem, sort of. I have to use group based authentication
instead of user based one. I modified the authentication configuration
file to the following and it's working now. However, I don't understand
the reason behind it. I read the documentation on the authentication
again and still couldn't find out why the group authentication is
required. 

 

<Directory "/usr/lib/nagios/cgi">

        AuthName "Nagios Access"

        AuthType Basic

 

        AuthMySQLUser authuser

        AuthMySQLPassword PaSsW0Rd

        AuthMySQLDB auth

        AuthMySQLUserTable users

        AuthMySQLNameField user_name

        AuthMySQLPasswordField user_passwd

        AuthMySQLGroupTable groups

        AuthMySQLGroupField user_group

 

#       require valid-user

        require group user

</Directory>

 

 

________________________________

From: Arnold Wang 
Sent: Tuesday, March 29, 2005 10:12 AM
To: 'nagios-users at lists.sourceforge.net'
Subject: CGI accesss issue

 

Hi,

I have a Nagios 2.0B2 installed on RHEL 4.0 machine. I have CGI
authentication enabled and configured, I believe. However, I'm having
trouble access any CGI page. The follow error message was logged in the
"ssl_error_log". 

[Tue Mar 29 09:47:47 2005] [crit] [client 10.17.2.69] configuration
error:  couldn't check access.  No groups file?:
/nagios/cgi-bin/status.cgi, referer: https://rcarhld02/nagios/side.html

I'm using MySql to store the user authentication. I verified that that
piece is working, including group authorization. What confused me was
what groups file the error message refers to? Is it the same group file
used for web authentication? If so, how to configure the Nagios to talk
to it, in my case the MySql? I looked the example in the document, it
seems to me the authentication and authorization are handled by httpd
server, is it correct?  

Thanks in advance for the helps.

 

My related configuration files looks like the following:

------ Web Authentication ------------------

<Directory "/usr/lib/nagios/cgi">

        AuthName "Nagios Access"

        AuthType Basic

 

        AuthMySQLUser authuser

        AuthMySQLPassword PaSsW0Rd

        AuthMySQLDB auth

        AuthMySQLUserTable users

        AuthMySQLNameField user_name

        AuthMySQLPasswordField user_passwd

        AuthMySQLGroupTable groups

        AuthMySQLGroupField user_group

 

        require valid-user

</Directory>

 

-------- cgi.cfg --------------------

main_config_file=/etc/nagios/nagios.cfg

resource_file=/etc/nagios/resources.cfg

physical_html_path=/usr/share/nagios

url_html_path=/nagios

use_authentication=1

show_context_help=0

default_user_name=

authorized_for_system_information=admin

authorized_for_system_commands=admin

authorized_for_configuration_information=admin

authorized_for_all_hosts=admin

authorized_for_all_host_commands=admin

authorized_for_all_service_commands=admin

statusmap_background_image=

statuswrl_include=

default_statusmap_layout=5

default_statuswrl_layout=4

refresh_rate=90

ping_syntax=/bin/ping -n -U -c 5 $HOSTADDRESS$

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.monitoring-lists.org/archive/users/attachments/20050329/af0d2a89/attachment.html>


More information about the Users mailing list