nagios.cmd ... "Sorry, you are not authorized ..." -- Argh!

[Olivier F. Beauchemin (Budget-Tech IT Consulting)]

Ok, auth on the share directory is optional. I don't use it. The sbin dir is
all that I've protected. See an earlier, yet recent post that shows my
.htaccess and htpasswd.users config.

Here's where I have a problem..

1. I log in, and can everything just fine. Nagios works great! Really, it
does.
2. Then I want to do something like, disable notification, schedule downtime
or somesuch.

Here, I am logged in as olivier (this user has the same privs as
nagiosadmin):
http://mrtg/nagios/cgi-bin/cmd.cgi?cmd_typ=6&host=foo%2Ebar%2Enet&service=FT
P

On this page, there is a commit button that posts to cmd.cgi, as soon as I
click commit I get this:
http://mrtg/nagios/cgi-bin/cmd.cgi

"Sorry, but you are not authorized to commit the specified command."
"Read the section of the documentation that deals with authentication and
authorization in the CGIs for more information."

I get the same thing for these other types of things (when I say I'm fine,
it means I am recognized as user olivier or user nagiosadmin ... whatever I
chose to login as):

    I'm fine here, but when I add in the comment and click commit... "Sorry,
you are not ..."
    http://mrtg/nagios/cgi-bin/cmd.cgi?cmd_typ=1

    I'm fine here, scheduling downtime... but when I click commit... "Sorry,
you are not ..."
    http://mrtg/nagios/cgi-bin/cmd.cgi?cmd_typ=55

    I'm fine here, trying to restart the nagios process... and then, you
guessed it.
    http://mrtg/nagios/cgi-bin/cmd.cgi?cmd_typ=13

... I am sure there are tons of these.


----- Original Message -----
From: "Darren Gamble" <Darren.Gamble at sjrb.ca>


> Good day,
>
> > PS.
> > I've noticed that when I login, it says logged in as
> > 'nagiosadmin' (which is
> > correct). But, when I hit "commit" to disable a service
> > check, for example,
> > the "Sorry" page indicates logged in as ?.
>
> The "logged in" value shows what Apache thinks your http user is.  If this
> is set for some pages but not for other pages, the problem is almost
> certainly that you haven't properly configured HTTP authentication for
those
> directories.
>
> Get the URLs for the pages that don't show a logged-in user, and those
that
> are.  Compare those to the directories that you have configured for access
> in your Apache config.
>
> If you are still stuck after doing this, post your Apache access configs
and
> the URLs for the pages which do show a user, and those that do not.



-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com