trouble accessing cgi pages after enabling ldap authentication with active directory

[Morris, Patrick]

On Wed, 02 Sep 2009, Noel Platzke wrote:

> Hi,
> I've recently changed the authentication scheme for my nagios installion from htpasswd files to active directory authentication using active directory. I can login fine but I'm presented with the "It appears as though you do not have permission to view information for any of the services you requested..." screen whenever I try to access any of the cgi pages. Authentication definitely works as the initial login and navigation works and I even see my name in the logs. But for some reason the cgi pages are all restricted. I'm even setup in cgi.cfg as authorized_for_all_*
> 
> Something tells me that nagios is seeing my username as something different than what's in apache but that's just a guess. Any ideas?
> 
> Relevant section of httpd conf file included here...
> 
>         <Directory />
>                 SSLRequireSSL
>                 Options -Indexes
>                 AuthType Basic
>                 AuthName "Nagios Login"
>                 AuthBasicProvider ldap
>                 AuthzLDAPAuthoritative Off
>                 AuthLDAPURL "ldap://ldapserver.net:389/ou=myOU,dc=myDC,dc=net?sAMAccountName?sub?(objectClass=user)<http://ldapserver.net:389/ou=myOU,dc=myDC,dc=net?sAMAccountName?sub?(objectClass=user)>"
>                 AuthLDAPBindDN "cn=USER,ou=myOU1,ou=myOU2,ou=myOU3,dc=myDC,dc=net"
>                 AuthLDAPBindPassword PASSWORD
>                 Require ldap-group cn=myCN,ou=myOU1,ou=myOU2,ou=myOU3,ou=myOU4,dc=myDC,dc=net
>                 ErrorDocument 401 /noaccess.html
>                 ErrorDocument 403 /noaccess.html
>         </Directory>

A couple questions:

Does the box at the top of the page say "logged in as [name you logged
in with here]?" Is it the name you expect?

Are the names people are logging in with (as displayed on the Nagios
interface) the same as the contact names on the hosts and services they
need to view?


------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with 
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null