<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns="http://www.w3.org/TR/REC-html40"> <head> <meta http-equiv=Content-Type content="text/html; charset=us-ascii"> <meta name=Generator content="Microsoft Word 11 (filtered medium)">  <style>  </style> </head> <body lang=EN-US link=blue vlink=purple> <div class=Section1> I found the problem, sort of. I have to use group based authentication instead of user based one. I modified the authentication configuration file to the following and it’s working now. However, I don’t understand the reason behind it. I read the documentation on the authentication again and still couldn’t find out why the group authentication is required. <o:p></o:p> <o:p> </o:p> <Directory "/usr/lib/nagios/cgi"><o:p></o:p> AuthName "Nagios Access"<o:p></o:p> AuthType Basic<o:p></o:p> <o:p> </o:p> AuthMySQLUser authuser<o:p></o:p> AuthMySQLPassword PaSsW0Rd<o:p></o:p> AuthMySQLDB auth<o:p></o:p> AuthMySQLUserTable users<o:p></o:p> AuthMySQLNameField user_name<o:p></o:p> AuthMySQLPasswordField user_passwd<o:p></o:p> AuthMySQLGroupTable groups<o:p></o:p> AuthMySQLGroupField user_group<o:p></o:p> <o:p> </o:p> # require valid-user<o:p></o:p> require group user<o:p></o:p> </Directory><o:p></o:p> <o:p></o:p> <o:p> </o:p> <div> <div class=MsoNormal align=center style='margin-left:.5in;text-align:center'> <hr size=2 width="100%" align=center tabindex=-1> </div> From: Arnold Wang Sent: Tuesday, March 29, 2005 10:12 AM To: 'nagios-users@lists.sourceforge.net' Subject: CGI accesss issue<o:p></o:p> </div> <o:p> </o:p> Hi,<o:p></o:p> I have a Nagios 2.0B2 installed on RHEL 4.0 machine. I have CGI authentication enabled and configured, I believe. However, I’m having trouble access any CGI page. The follow error message was logged in the “ssl_error_log”. <o:p></o:p> [Tue Mar 29 09:47:47 2005] [crit] [client 10.17.2.69] configuration error: couldn't check access. No groups file?: /nagios/cgi-bin/status.cgi, referer: <a href="https://rcarhld02/nagios/side.html">https://rcarhld02/nagios/side.html</a><o:p></o:p> I’m using MySql to store the user authentication. I verified that that piece is working, including group authorization. What confused me was what groups file the error message refers to? Is it the same group file used for web authentication? If so, how to configure the Nagios to talk to it, in my case the MySql? I looked the example in the document, it seems to me the authentication and authorization are handled by httpd server, is it correct? <o:p></o:p> Thanks in advance for the helps.<o:p></o:p> <o:p> </o:p> My related configuration files looks like the following:<o:p></o:p> ------ Web Authentication ------------------<o:p></o:p> <Directory "/usr/lib/nagios/cgi"><o:p></o:p> AuthName "Nagios Access"<o:p></o:p> AuthType Basic<o:p></o:p> <o:p> </o:p> AuthMySQLUser authuser<o:p></o:p> AuthMySQLPassword PaSsW0Rd<o:p></o:p> AuthMySQLDB auth<o:p></o:p> AuthMySQLUserTable users<o:p></o:p> AuthMySQLNameField user_name<o:p></o:p> AuthMySQLPasswordField user_passwd<o:p></o:p> AuthMySQLGroupTable groups<o:p></o:p> AuthMySQLGroupField user_group<o:p></o:p> <o:p> </o:p> require valid-user<o:p></o:p> </Directory><o:p></o:p> <o:p> </o:p> -------- cgi.cfg --------------------<o:p></o:p> main_config_file=/etc/nagios/nagios.cfg<o:p></o:p> resource_file=/etc/nagios/resources.cfg<o:p></o:p> physical_html_path=/usr/share/nagios<o:p></o:p> url_html_path=/nagios<o:p></o:p> use_authentication=1<o:p></o:p> show_context_help=0<o:p></o:p> default_user_name=<o:p></o:p> authorized_for_system_information=admin<o:p></o:p> authorized_for_system_commands=admin<o:p></o:p> authorized_for_configuration_information=admin<o:p></o:p> authorized_for_all_hosts=admin<o:p></o:p> authorized_for_all_host_commands=admin<o:p></o:p> authorized_for_all_service_commands=admin<o:p></o:p> statusmap_background_image=<o:p></o:p> statuswrl_include=<o:p></o:p> default_statusmap_layout=5<o:p></o:p> default_statuswrl_layout=4<o:p></o:p> refresh_rate=90<o:p></o:p> ping_syntax=/bin/ping -n -U -c 5 $HOSTADDRESS$<o:p></o:p> <o:p> </o:p> </div> </body> </html>