Authentication Boggle

[Shawn McCool]

I'm running Suse 7.0
My httpd.conf is set up as follows

ScriptAlias /nagios/cgi-bin/ /usr/local/nagios/sbin/
<Directory "/usr/local/nagios/sbin/">
    AllowOverride AuthConfig
    Options ExecCGI
    Order allow,deny
    Allow from all
</Directory>

Alias /nagios/ /usr/local/nagios/share/
<Directory "/usr/local/nagios/share">
    Options None
    AllowOverride AuthConfig
    Order allow,deny
    Allow from all
</Directory>

my .htaccess in my /usr/local/nagios/share is

AuthName "Nagios Access"
AuthType Basic
AuthUserFile /usr/local/nagios/etc/nagios.pwd
require valid-user


My password file seems to be reading right, as when i go to http://mydomain.com/nagios/index.html
it prompts me for password, and I can successfully authenticate.  However, in the Tactical Monitoring Overview (in the upper left grey box) it shows:

Logged in as ?

My cgi.cfg has

use_authentication=1

And all of the authorized_for_xxxxx are set to the appropriate user.

I am seeing nothing awry in neither my access_log nor my error_log.

I am running apache 1.3.27 and Nagios 1.0 with Nagios Plugins 1.3.0

My Nagios dir structure looks like this: 

drwxrwxr-x   2 nagios   nagiocmd     4.0k Mar 26 08:57 bin
drwxrwxr-x   2 nagios   nagiocmd     4.0k Mar 27 12:49 etc
drwx------   2 nagios   nagiocmd     4.0k Mar 27 12:42 libexec
drwxrwxr-x   2 nagios   nagiocmd     4.0k Mar 26 09:13 sbin
drwxrwxr-x   8 nagios   nagiocmd     4.0k Mar 27 12:49 share
drwxrwxr-x   4 nagios   nagiocmd     4.0k Mar 27 12:51 var



Where nagiocmd is a group which has both the nagios user and the user my apache runs as.

My Nagios Share dir:

-rwxr-xr-x   1 nagios   nagiocmd      105 Mar 26 11:08 .htaccess
drwxrwxr-x   2 nagios   nagiocmd     4.0k Mar 26 08:57 contexthelp
drwxrwxr-x   3 nagios   nagiocmd     4.0k Mar 26 08:57 docs
drwxrwxr-x   4 nagios   nagiocmd     4.0k Mar 26 09:10 images
-rw-rw-r--   1 nagios   nagiocmd      658 Mar 26 08:57 index.html
-rw-rw-r--   1 nagios   nagiocmd     2.3k Mar 26 08:57 main.html
drwxrwxr-x   2 nagios   nagiocmd     4.0k Mar 26 08:57 media
-rw-rw-r--   1 nagios   nagiocmd       26 Mar 26 08:57 robots.txt
-rw-rw-r--   1 nagios   nagiocmd      10k Mar 26 08:57 side.html
drwxrwxr-x   2 nagios   nagiocmd     4.0k Mar 25 16:49 ssi
drwxrwxr-x   2 nagios   nagiocmd     4.0k Mar 26 08:57 stylesheets

Nagios SBIN:

-rwxrwxr-x   1 nagios   nagiocmd     150k Mar 26 08:57 avail.cgi
-rwxrwxr-x   1 nagios   nagiocmd     150k Mar 26 08:57 cmd.cgi
-rwxrwxr-x   1 nagios   nagiocmd     118k Mar 26 08:57 config.cgi
-rwxrwxr-x   1 nagios   nagiocmd     164k Mar 26 08:57 extinfo.cgi
-rwxrwxr-x   1 nagios   nagiocmd     172k Mar 26 08:57 histogram.cgi
-rwxrwxr-x   1 nagios   nagiocmd     108k Mar 26 08:57 history.cgi
-rwxrwxr-x   1 nagios   nagiocmd     105k Mar 26 08:57 notifications.cgi
-rwxrwxr-x   1 nagios   nagiocmd     102k Mar 26 08:57 outages.cgi
-rwxrwxr-x   1 nagios   nagiocmd     103k Mar 26 08:57 showlog.cgi
-rwxrwxr-x   1 nagios   nagiocmd     149k Mar 26 08:57 status.cgi
-rwxrwxr-x   1 nagios   nagiocmd     184k Mar 26 08:57 statusmap.cgi
-rwxrwxr-x   1 nagios   nagiocmd     119k Mar 26 08:57 statuswml.cgi
-rwxrwxr-x   1 nagios   nagiocmd     113k Mar 26 08:57 statuswrl.cgi
-rwxrwxr-x   1 nagios   nagiocmd     123k Mar 26 08:57 summary.cgi
-rwxrwxr-x   1 nagios   nagiocmd     127k Mar 26 08:57 tac.cgi
-rwxrwxr-x   1 nagios   nagiocmd     173k Mar 26 08:57 trends.cgi

Nagios ETC

-rwxrwxr-x   1 nagios   nagiocmd      16k Mar 27 12:44 cgi.cfg
-rwxrwxr-x   1 nagios   nagiocmd     3.3k Mar 26 12:02 checkcommands.cfg
-rwxrwxr-x   1 nagios   nagiocmd      358 Mar 25 19:27 contactgroups.cfg
-rwxrwxr-x   1 nagios   nagiocmd     1.0k Mar 25 19:26 contacts.cfg
-rwxrwxr-x   1 nagios   nagiocmd      670 Mar 26 09:09 dependencies.cfg
-rwxrwxr-x   1 nagios   nagiocmd      670 Mar 26 09:06 escalations.cfg
-rwxrwxr-x   1 nagios   nagiocmd      440 Mar 25 19:22 hostgroups.cfg
-rwxrwxr-x   1 nagios   nagiocmd     1.4k Mar 25 19:20 hosts.cfg
-rwxrwxr-x   1 nagios   nagiocmd     3.7k Mar 25 19:05 misccommands.cfg
-rwxrwxr-x   1 nagios   nagiocmd      21k Mar 26 09:26 nagios.cfg
-rwxrwxr-x   1 nagios   nagiocmd       21 Mar 26 09:15 nagios.pwd
-rwxrwxr-x   1 nagios   nagiocmd     3.0k Mar 26 09:04 resource.cfg
-rwxrwxr-x   1 nagios   nagiocmd     1.6k Mar 26 09:09 services.cfg
-rwxrwxr-x   1 nagios   nagiocmd      17k Mar 25 16:49 services.cfg-sample
-rwxrwxr-x   1 nagios   nagiocmd     1.1k Mar 25 17:03 timeperiods.cfg


If I look at any CGI other than tactical overview I get this message

It appears as though you do not have permission to view information for any of the hosts you requested...
If you believe this is an error, check the HTTP server authentication requirements for accessing this CGI
and check the authorization options in your CGI configuration file.


I am not sure what is happening incorrectly in my authentication.  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.monitoring-lists.org/archive/users/attachments/20030327/403faec7/attachment.html>