trouble accessing cgi pages after enabling ldap authentication with active directory

Noel Platzke neufpas at gmail.com
Wed Sep 2 21:29:54 CEST 2009


Problem solved. I had enabled use_ssl_authentication in cgi.cfg and when I
turned it off username stopped being displayed as '?' and I was able to
access the cgi pages.

On Wed, Sep 2, 2009 at 2:26 PM, Noel Platzke <neufpas at gmail.com> wrote:

> Hi,
> I've recently changed the authentication scheme for my nagios installion
> from htpasswd files to active directory authentication using active
> directory. I can login fine but I'm presented with the "It appears as though
> you do not have permission to view information for any of the services you
> requested..." screen whenever I try to access any of the cgi pages.
> Authentication definitely works as the initial login and navigation works
> and I even see my name in the logs. But for some reason the cgi pages are
> all restricted. I'm even setup in cgi.cfg as authorized_for_all_*
>
> Something tells me that nagios is seeing my username as something different
> than what's in apache but that's just a guess. Any ideas?
>
> Relevant section of httpd conf file included here...
>
>         <Directory />
>                 SSLRequireSSL
>                 Options -Indexes
>                 AuthType Basic
>                 AuthName "Nagios Login"
>                 AuthBasicProvider ldap
>                 AuthzLDAPAuthoritative Off
>                 AuthLDAPURL "ldap://
> ldapserver.net:389/ou=myOU,dc=myDC,dc=net?sAMAccountName?sub?(objectClass=user)<http://ldapserver.net:389/ou=myOU,dc=myDC,dc=net?sAMAccountName?sub?%28objectClass=user%29>
> "
>                 AuthLDAPBindDN
> "cn=USER,ou=myOU1,ou=myOU2,ou=myOU3,dc=myDC,dc=net"
>                 AuthLDAPBindPassword PASSWORD
>                 Require ldap-group
> cn=myCN,ou=myOU1,ou=myOU2,ou=myOU3,ou=myOU4,dc=myDC,dc=net
>                 ErrorDocument 401 /noaccess.html
>                 ErrorDocument 403 /noaccess.html
>         </Directory>
>
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.monitoring-lists.org/archive/users/attachments/20090902/8f9f2ac0/attachment.html>
-------------- next part --------------
------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with 
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
-------------- next part --------------
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null


More information about the Users mailing list