Obvious, but ensure that /var/www/cgi-bin/nagios is a valid directory
from the perspective of your chroot'd server.

Another caveat is to ensure that the named pipe is accessable to both
the nagios executable, and to the chroot'd cgi's (once they start
working that is).  Nagios references the pipe via absolute naming, so
you may have to 'break' things a bit and create a symlink under your
chroot directory of "/usr/local/nagios/rw/nagios.cmd" that points to
the actual pipe.

Also, try turning off chroot to see if that helps.  That will at the
least tell you if it's a visibility issue or not.

Best of luck!

On 6/23/06, Joco Salvatti <[EMAIL PROTECTED]> wrote:
Hi all,

I've installed and configured nagios, and I can open the start page
with no problems. But I don't have access to the links that monitor
services, such as Tatical Overview. At apache log I have the following
error messages:

[Fri Jun 23 15:42:51 2006] [error] (13)Permission denied: exec of
/cgi-bin/nagios/tac.cgi failed
[Fri Jun 23 15:42:51 2006] [error] [client 127.0.0.1] Premature end of
script headers: /cgi-bin/nagios/tac.cgi

My httpd.conf is how it follows:

ScriptAlias /cgi-bin/nagios "/var/www/cgi-bin/nagios"

<Directory "/var/www/cgi-bin/nagios">
#  SSLRequireSSL
   Options ExecCGI

   AuthName "Nagios Access"
   AuthType Basic
   AuthUserFile /var/www/nagios/htpasswd.users
   Require valid-user

   Order deny,allow
   Deny from all
   Allow from 127.0.0.1
</Directory>

Alias /nagios "/var/www/nagios"

<Directory "/var/www/nagios">
#  SSLRequireSSL
   Options ExecCGI
   Options None
   AllowOverride None

   AuthName "Nagios Access"
   AuthType Basic
   AuthUserFile /var/www/nagios/htpasswd.users
   Require valid-user

   Order deny,allow
   Deny from all
   Allow from 127.0.0.1
</Directory>

My apache server runs using the chroot feature. Could please anyone
tell me what's going wrong?

Thanks.


--
Joco Salvatti
Undergraduating in Computer Science
Federal University of Para - UFPA
web: http://www.openbsd-pa.org
e-mail: [EMAIL PROTECTED]

Reply via email to