CGI accesss issue
Arnold Wang
arnold.wang at inovis.com
Wed Mar 30 01:04:02 CEST 2005
I found the problem, sort of. I have to use group based authentication
instead of user based one. I modified the authentication configuration
file to the following and it's working now. However, I don't understand
the reason behind it. I read the documentation on the authentication
again and still couldn't find out why the group authentication is
required.
<Directory "/usr/lib/nagios/cgi">
AuthName "Nagios Access"
AuthType Basic
AuthMySQLUser authuser
AuthMySQLPassword PaSsW0Rd
AuthMySQLDB auth
AuthMySQLUserTable users
AuthMySQLNameField user_name
AuthMySQLPasswordField user_passwd
AuthMySQLGroupTable groups
AuthMySQLGroupField user_group
# require valid-user
require group user
</Directory>
________________________________
From: Arnold Wang
Sent: Tuesday, March 29, 2005 10:12 AM
To: 'nagios-users at lists.sourceforge.net'
Subject: CGI accesss issue
Hi,
I have a Nagios 2.0B2 installed on RHEL 4.0 machine. I have CGI
authentication enabled and configured, I believe. However, I'm having
trouble access any CGI page. The follow error message was logged in the
"ssl_error_log".
[Tue Mar 29 09:47:47 2005] [crit] [client 10.17.2.69] configuration
error: couldn't check access. No groups file?:
/nagios/cgi-bin/status.cgi, referer: https://rcarhld02/nagios/side.html
I'm using MySql to store the user authentication. I verified that that
piece is working, including group authorization. What confused me was
what groups file the error message refers to? Is it the same group file
used for web authentication? If so, how to configure the Nagios to talk
to it, in my case the MySql? I looked the example in the document, it
seems to me the authentication and authorization are handled by httpd
server, is it correct?
Thanks in advance for the helps.
My related configuration files looks like the following:
------ Web Authentication ------------------
<Directory "/usr/lib/nagios/cgi">
AuthName "Nagios Access"
AuthType Basic
AuthMySQLUser authuser
AuthMySQLPassword PaSsW0Rd
AuthMySQLDB auth
AuthMySQLUserTable users
AuthMySQLNameField user_name
AuthMySQLPasswordField user_passwd
AuthMySQLGroupTable groups
AuthMySQLGroupField user_group
require valid-user
</Directory>
-------- cgi.cfg --------------------
main_config_file=/etc/nagios/nagios.cfg
resource_file=/etc/nagios/resources.cfg
physical_html_path=/usr/share/nagios
url_html_path=/nagios
use_authentication=1
show_context_help=0
default_user_name=
authorized_for_system_information=admin
authorized_for_system_commands=admin
authorized_for_configuration_information=admin
authorized_for_all_hosts=admin
authorized_for_all_host_commands=admin
authorized_for_all_service_commands=admin
statusmap_background_image=
statuswrl_include=
default_statusmap_layout=5
default_statuswrl_layout=4
refresh_rate=90
ping_syntax=/bin/ping -n -U -c 5 $HOSTADDRESS$
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.monitoring-lists.org/archive/users/attachments/20050329/af0d2a89/attachment.html>
More information about the Users
mailing list