[EMAIL PROTECTED] a écrit sur 14/03/2007 15:21:46 
:

> > I just subscribed to the list and wanted to give my feedback 
> > on the message of Francois Pernet from 2007-01-22 
> > (https://sourceforge.net/mailarchive/message.php?msg_id=38030310). 
> > 
> > I would really love to be able to do Nagios AAA through LDAP. 
> > 
> > I also set up LDAP authentication for Nagios and, I thing, 
> > it's only limited by the contact_name in Nagios not matching 
> > the LDAP-authenticated HTTP user; Our LDAP users are in the 
> > form "uid=cbu,dc=mycompany,dc=be" where contact_name are in 
> > the form "cbu" (that's the uid in the LDAP dn... so close to 
> > the goal...). 
> > 
> > I just read in the Apache log documentation that the userid 
> > of the person requesting the document as determined by HTTP 
> > authentication is typically provided to CGI scripts in the 
> > REMOTE_USER environment variable. So, if Nagios cgi do use 
> > this environment variable, it would be in my case as simple 
> > as adding a small filter at the start of all Nagios cgi. 
> 
> Alternatively, you could just have the users log in using their uid,
> which has got to be a lot easier to type. :)
> 

:-D

That's what they do but openldap automagically adds the rest of their 
distinguished name to their uid... 

Are you aware of the existence of some setting that would prevent this 
behaviour?

Cyrille
-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null

Reply via email to