Nagios pam authentication

[donut678]

Greetings.

I am currently in the middle of trying to change the nagios authentication type to use pam for user authentication and am having trouble - When I try to use pam as my authentication type, the http daemon fails to start. I was wondering if anybody else had experience with this.

I am running nagios core 4.0.8 on Red Hat 6.

I have the following modules installed:

mod_authnz_pam.x86_64
mod_intercept_form_submit.x86_64
mod_lookup_identity.x86_64

I get no errors when I use the LoadModule command in /etc/httpd/httpd.conf

My /usr/local/nagios/etc/httpd/nagios.conf is as follows:

Code: Select all

#Nagios config for pam authentication
<Directory "/usr/local/nagios/sbin">
Options ExecCGI
AllowOverride None
Order allow,deny
Allow from all
AuthName "Nagios Access (PAM)"
AuthType Basic
AuthBasicProvider PAM
AuthPAMService webapp
Require valid-user
</Directory>

Alias /nagios "/usr/local/nagios/share"


<Directory "/usr/local/nagios/share">
Options None
AllowOverride None
Order allow,deny
Allow from all
AuthName "Nagios Access (PAM)"
AuthBasicProvider PAM
AuthPAMService webapp
AuthType Basic
Require valid-user
</Directory>

As soon as I make those configuration changes, the apache service fails to start.

Has anybody done this before? Any insight?

[bolson]

As this is an Apache issue rather than a Nagios issue, it's a bit out of scope but I may have a couple of pointers.

create a file /etc/pam.d/webapp with the following directives:

auth required pam_sss.so
account required pam_sss.so

Also, post the output of tail -n 60 /var/log/messages