Logged in as ?

[hermathr]

I am using Shibboleth and SSL when authenticating to nagios but I am always seeing a "Logged in as ?" once I authenticate.

I created a dump of my environment variables and I notice there's no http_remote_user in this failing instance but in another, working instance this variable is in the dump with the correct username.

I have a http_kduser environment variable that's set to my username.

I have the following as part of my cgiauth.c file:
temp_ptr=getenv("HTTP_REMOTE_USER");
if(temp_ptr==NULL){ temp_ptr=getenv("HTTP_KDUSER"); }

I'm attaching a copy of my nagios.conf found in /etc/httpd/conf.d.

Any help would be greatly appreciated.

[cdienger]

I've not integrated Nagios with Shibboleth before, so correct me if my understanding is incorrect.

Shibboleth is responsible for authenticating the user and then directs the user's browser to send a HTTP header(HTTP_REMOTE_USER) with the username? The Nagios system then sets the HTTP_REMOTE_USER environment variable?

What steps were taken exactly to integrate the two?

Can you verify with the browser's dev tools that the requests to the Nagios system have the proper header(s)?

[hermathr]

Hi,

Thanks for the response.

I've dumped out a working and non-working cgi env script to dump out the varibales.

I've attached both of those.

I've tried everything I can think of, cgiauth.c , messed with shibboleth settings.

Here is a working and non-working dump.

[hermathr]

And yes, your understanding is correct.

[hermathr]

Also please note in the "working" one I see "HTTP_REMOTE_USER" which is missing from the non-working.

I do see HTTP_KDUSER in both which I was assuming would be passed.

Sorry if this need clarification.

Please let me know and thanks again sincerely for your help.

[ssax]

Please attach the working vs non-working dump, we do not see them attached.