Re: [Nagios-users] Error after installed Nagios in a new server
ReynierPM wrote: simple .htaccess/htpasswd auth instead of your LDAP auth. Perhaps that's doing something strange to REMOTE_USER. I have no more suggestions for you other than to try with Maybe you or developers will take this into account for future version of Nagios. Personally in my work is better use a LDAP domain instead of create independents users every time I need gain acces to Nagios Web Interface. Cheers I use LDAP authentication on all of my Nagios installations, and have never had a problem with it. Obviously, your LDAP configuration is likely to be different than mine, but in general, LDAP and Nagios play nicely together. -- David Wallis Information Technology Advanced Photon Source Argonne National Laboratory -- Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Error after installed Nagios in a new server
On Nov 10, 2009, at 10:20 PM, ReynierPM wrote: > Marc Powell wrote: >> I don't know that I'd say security breach but it does show that permissions >> are not an issue per se and that you're editing the right file. > > Ok, if you said this I believe because you're and expert and I don't. I'm a bit confused by this statement. This test was just a troubleshooting step, really to eliminate filesystem permission issues. As far as being a security issue, that depends entirely on your environment and policies. I have several nagios instances with authentication off and several with it on, based on our needs. >> I have no more suggestions for you other than to try with simple >> .htaccess/htpasswd auth instead of your LDAP auth. Perhaps that's doing >> something strange to REMOTE_USER. > > Maybe you or developers will take this into account for future version of > Nagios. Take what into account/how? There's nothing that nagios needs to account for. Either your auth plugin sets the normal auth environment variable and you've told nagios to expect that exact string or not. > Personally in my work is better use a LDAP domain instead of create > independents users every time I need gain acces to Nagios Web Interface. My suggestion to do so was yet another troubleshooting step to eliminate your ldap auth plugin as a source of the problem. If you can log in with a htpasswd user and everything works then the problem is with the LDAP auth configuration in apache. It gives you a direction to look. There's no reason you shouldn't be able to use LDAP auth assuming that your chosen auth plugin does the right things. A quick google for 'nagios ldap authentication' show several how-to's, specifically ldap against Active Directory so it can work... It appears the most common problem is that the ldap plugin may set the REMOTE_USER environment variable to the entire DN, not just the username part. -- Marc -- Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Error after installed Nagios in a new server
Le Tue, 10 Nov 2009 23:20:00 -0500, ReynierPM a écrit : > Maybe you or developers will take this into account for future > version of Nagios. Personally in my work is better use a LDAP domain > instead of create independents users every time I need gain acces to > Nagios Web Interface. Authentication is made by Apache (via ldap or anything else) not by nagios. Apache set the REMOTE_USER and it must match a contact name from nagios configuration. So you have to user the user name from ldap in your nagios config. -- Flyinvap -- Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Error after installed Nagios in a new server
Marc Powell wrote: > I don't know that I'd say security breach but it does show that > permissions are not an issue per se and that you're editing the right > file. Ok, if you said this I believe because you're and expert and I don't. > I have no more suggestions for you other than to try with > simple .htaccess/htpasswd auth instead of your LDAP auth. Perhaps > that's doing something strange to REMOTE_USER. Maybe you or developers will take this into account for future version of Nagios. Personally in my work is better use a LDAP domain instead of create independents users every time I need gain acces to Nagios Web Interface. Cheers -- ReynierPM -- Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Error after installed Nagios in a new server
On Nov 10, 2009, at 4:15 PM, ReynierPM wrote: > Marc Powell wrote: >> On Nov 10, 2009, at 12:52 PM, ReynierPM wrote: >> Besides the only other option I could think of before? >> Can you see hosts/services with 'use_authentication' disabled? >> Could you have a web server permissions problem? Does your web >> server have read access to the nagios var directory and files? > > Well I disabled 'use_authentication' and now I can access without > problems, but this is not a security breach? I don't know that I'd say security breach but it does show that permissions are not an issue per se and that you're editing the right file. I have no more suggestions for you other than to try with simple .htaccess/htpasswd auth instead of your LDAP auth. Perhaps that's doing something strange to REMOTE_USER. -- Marc -- Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Error after installed Nagios in a new server
Marc Powell wrote: > On Nov 10, 2009, at 12:52 PM, ReynierPM wrote: > > > Besides the only other option I could think of before? > > Can you see hosts/services with 'use_authentication' disabled? Could > you have a web server permissions problem? Does your web server have > read access to the nagios var directory and files? Well I disabled 'use_authentication' and now I can access without problems, but this is not a security breach? -- Cheers ReynierPM -- Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Error after installed Nagios in a new server
On Nov 10, 2009, at 12:52 PM, ReynierPM wrote: > Marc Powell wrote: >> *Exactly* that? The authentication is very simplistic on the >> nagios side. All it does is look at the REMOTE_USER environment >> variable set by your web server and matches that against contacts >> specified for hosts/services and the authorized_for_* settings. If >> you are shown to be 'Logged in as rperezm' (exactly), then it >> should be working and there is little room for it not to be. The >> only other option I can think of is that the cgi.cfg file you are >> editing is not the one being used by the CGI's (maybe I need more >> coffee though). > > So, what you suggest then? Besides the only other option I could think of before? Can you see hosts/services with 'use_authentication' disabled? Could you have a web server permissions problem? Does your web server have read access to the nagios var directory and files? -- Marc -- Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Error after installed Nagios in a new server
Marc Powell wrote: > *Exactly* that? The authentication is very simplistic on the nagios > side. All it does is look at the REMOTE_USER environment variable set > by your web server and matches that against contacts specified for > hosts/services and the authorized_for_* settings. If you are shown to > be 'Logged in as rperezm' (exactly), then it should be working and > there is little room for it not to be. The only other option I can > think of is that the cgi.cfg file you are editing is not the one being > used by the CGI's (maybe I need more coffee though). So, what you suggest then? Cheers -- ReynierPM -- Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Error after installed Nagios in a new server
On Nov 10, 2009, at 10:21 AM, ReynierPM wrote: > Marc Powell wrote: >> On Nov 10, 2009, at 8:12 AM, ReynierPM wrote: >> In the top left box, does nagios show you 'Logged in as' one of >> these users? > > Yes it's it show me logged in as rperezm *Exactly* that? The authentication is very simplistic on the nagios side. All it does is look at the REMOTE_USER environment variable set by your web server and matches that against contacts specified for hosts/services and the authorized_for_* settings. If you are shown to be 'Logged in as rperezm' (exactly), then it should be working and there is little room for it not to be. The only other option I can think of is that the cgi.cfg file you are editing is not the one being used by the CGI's (maybe I need more coffee though). -- Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Error after installed Nagios in a new server
Lyle Giese wrote: > ReynierPM wrote: > In addition to what Marc asked, did you restart your browser? Most web > browsers will cache login info until you restart your browser. > Several times, really I don't know why it doesn't work -- Saludos ReynierPM -- Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Error after installed Nagios in a new server
Marc Powell wrote: > On Nov 10, 2009, at 8:12 AM, ReynierPM wrote: > > > In the top left box, does nagios show you 'Logged in as' one of these > users? > Yes it's it show me logged in as rperezm -- Saludos ReynierPM -- Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Error after installed Nagios in a new server
ReynierPM wrote: > ReynierPM wrote: > >> Hi every: >> I've installed today Nagios on a new dedicated server. I've also one >> Bacula Server configured to check. When I try to access to "Hosts" or >> any other link I get this error: >> >> "It appears as though you do not have permission to view information for >> any of the hosts you requested..." >> >> I check this links: >> http://www.mail-archive.com/nagios-users@lists.sourceforge.net/msg06010.html >> http://nagios.sourceforge.net/docs/2_0/installweb.html >> http://nagios.sourceforge.net/docs/3_0/cgiauth.html >> >> And do all this but it still not working. Can any help me to fix this? >> > > Hi again: > Today I check all the configuration files and do whatever I can but > still not working. I described here what I'm doing. > > 1) Configure the Apache && Nagios authentication as follow: > > ScriptAlias /nagios/cgi-bin "/usr/local/nagios/sbin" > > SSLRequireSSL > Options ExecCGI > AllowOverride None > Order allow,deny > Allow from all > > AuthType Basic > AuthBasicProvider ldap > AuthName "Servicio Monitoreo DT IP" > AuthLDAPURL "ldap://10.0.0.3/OU=UCI Domain > Users,DC=uci,DC=cu?sAMAccountname?sub?(objectClass=person)" > AuthLDAPBindDN "ad.sea...@uci.cu" > AuthLDAPBindPassword "uF2SODWAHiW0eJboFFQEAvVzJ" > AuthzLDAPAuthoritative Off > Require ldap-user cvega rperezm > > > Alias /nagios "/usr/local/nagios/share" > > SSLRequireSSL > Options None > AllowOverride None > Order allow,deny > Allow from all > > AuthType Basic > AuthBasicProvider ldap > AuthName "Servicio Monitoreo DT IP" > AuthLDAPURL "ldap://10.0.0.3/OU=UCI Domain > Users,DC=uci,DC=cu?sAMAccountname?sub?(objectClass=person)" > AuthLDAPBindDN "ad.sea...@uci.cu" > AuthLDAPBindPassword "uF2SODWAHiW0eJboFFQEAvVzJ" > AuthzLDAPAuthoritative Off > Require ldap-user cvega rperezm > > > As you can see I use LDAP instead of Basic or Digest auth and also use > HTTPS instead of HTTP. > > 2) Set the var use_authentication in /usr/local/nagios/etc to 1 > use_authentication=1 > > 3) Change all authorized_for_ vars to suit all the users > authorized_for_system_information=nagiosadmin, nagios, rperezm > authorized_for_configuration_information=nagiosadmin, nagios, rperezm > authorized_for_system_commands=nagiosadmin, nagios, rperezm > authorized_for_all_services=nagiosadmin, nagios, rperezm > authorized_for_all_hosts=nagiosadmin, nagios, rperezm > authorized_for_all_service_commands=nagiosadmin, nagios, rperezm > authorized_for_all_host_commands=nagiosadmin, nagios, rperezm > > 4) Restart Nagios several times > > What's wrong? Why this still not working? > In addition to what Marc asked, did you restart your browser? Most web browsers will cache login info until you restart your browser. Lyle Giese LCR Computer Services, Inc. -- Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Error after installed Nagios in a new server
On Nov 10, 2009, at 8:12 AM, ReynierPM wrote: > 3) Change all authorized_for_ vars to suit all the users > authorized_for_system_information=nagiosadmin, nagios, rperezm > authorized_for_configuration_information=nagiosadmin, nagios, rperezm > authorized_for_system_commands=nagiosadmin, nagios, rperezm > authorized_for_all_services=nagiosadmin, nagios, rperezm > authorized_for_all_hosts=nagiosadmin, nagios, rperezm > authorized_for_all_service_commands=nagiosadmin, nagios, rperezm > authorized_for_all_host_commands=nagiosadmin, nagios, rperezm In the top left box, does nagios show you 'Logged in as' one of these users? -- Marc -- Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Error after installed Nagios in a new server
ReynierPM wrote: > Hi every: > I've installed today Nagios on a new dedicated server. I've also one > Bacula Server configured to check. When I try to access to "Hosts" or > any other link I get this error: > > "It appears as though you do not have permission to view information for > any of the hosts you requested..." > > I check this links: > http://www.mail-archive.com/nagios-users@lists.sourceforge.net/msg06010.html > http://nagios.sourceforge.net/docs/2_0/installweb.html > http://nagios.sourceforge.net/docs/3_0/cgiauth.html > > And do all this but it still not working. Can any help me to fix this? Hi again: Today I check all the configuration files and do whatever I can but still not working. I described here what I'm doing. 1) Configure the Apache && Nagios authentication as follow: ScriptAlias /nagios/cgi-bin "/usr/local/nagios/sbin" SSLRequireSSL Options ExecCGI AllowOverride None Order allow,deny Allow from all AuthType Basic AuthBasicProvider ldap AuthName "Servicio Monitoreo DT IP" AuthLDAPURL "ldap://10.0.0.3/OU=UCI Domain Users,DC=uci,DC=cu?sAMAccountname?sub?(objectClass=person)" AuthLDAPBindDN "ad.sea...@uci.cu" AuthLDAPBindPassword "uF2SODWAHiW0eJboFFQEAvVzJ" AuthzLDAPAuthoritative Off Require ldap-user cvega rperezm Alias /nagios "/usr/local/nagios/share" SSLRequireSSL Options None AllowOverride None Order allow,deny Allow from all AuthType Basic AuthBasicProvider ldap AuthName "Servicio Monitoreo DT IP" AuthLDAPURL "ldap://10.0.0.3/OU=UCI Domain Users,DC=uci,DC=cu?sAMAccountname?sub?(objectClass=person)" AuthLDAPBindDN "ad.sea...@uci.cu" AuthLDAPBindPassword "uF2SODWAHiW0eJboFFQEAvVzJ" AuthzLDAPAuthoritative Off Require ldap-user cvega rperezm As you can see I use LDAP instead of Basic or Digest auth and also use HTTPS instead of HTTP. 2) Set the var use_authentication in /usr/local/nagios/etc to 1 use_authentication=1 3) Change all authorized_for_ vars to suit all the users authorized_for_system_information=nagiosadmin, nagios, rperezm authorized_for_configuration_information=nagiosadmin, nagios, rperezm authorized_for_system_commands=nagiosadmin, nagios, rperezm authorized_for_all_services=nagiosadmin, nagios, rperezm authorized_for_all_hosts=nagiosadmin, nagios, rperezm authorized_for_all_service_commands=nagiosadmin, nagios, rperezm authorized_for_all_host_commands=nagiosadmin, nagios, rperezm 4) Restart Nagios several times What's wrong? Why this still not working? -- Saludos ReynierPM -- Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
[Nagios-users] Error after installed Nagios in a new server
Hi every: I've installed today Nagios on a new dedicated server. I've also one Bacula Server configured to check. When I try to access to "Hosts" or any other link I get this error: "It appears as though you do not have permission to view information for any of the hosts you requested..." I check this links: http://www.mail-archive.com/nagios-users@lists.sourceforge.net/msg06010.html http://nagios.sourceforge.net/docs/2_0/installweb.html http://nagios.sourceforge.net/docs/3_0/cgiauth.html And do all this but it still not working. Can any help me to fix this? -- Cheers ReynierPM -- Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
