Hi
We enabled LDAP for authentication and everything seems to work except for one thing. When willing to force a check of all services by clicking on "Schedule a check of all services on this host" I get error "Sorry, but you are not authorized to commit the specified command.". I also see "Logged in as ?" from that point on. Before my ldap username is displayed.
Anybody an idea why?
----------------------------
root@nagios4:~# cat /etc/nagios4/cgi.cfg | grep -v ^# | grep -v ^$
main_config_file=/etc/nagios4/nagios.cfg
physical_html_path=/usr/share/nagios4/htdocs
url_html_path=/nagios4
show_context_help=1
use_pending_states=1
use_authentication=1
use_ssl_authentication=0
authorized_for_system_information=*
authorized_for_configuration_information=*
authorized_for_system_commands=*
authorized_for_all_services=*
authorized_for_all_hosts=*
authorized_for_all_service_commands=*
authorized_for_all_host_commands=*
authorized_for_read_only=nagios
default_statuswrl_layout=4
ping_syntax=/bin/ping -n -U -c 5 $HOSTADDRESS$
refresh_rate=15
result_limit=250
escape_html_tags=1
action_url_target=_blank
notes_url_target=_blank
lock_author_names=1
navbar_search_for_addresses=1
navbar_search_for_aliases=1
----------------------------
root@nagios4:~# cat /etc/apache2/sites-enabled/nagios4.conf | grep -v ^# | grep -v ^$
ScriptAlias /cgi-bin/nagios4 /usr/lib/cgi-bin/nagios4
ScriptAlias /nagios4/cgi-bin /usr/lib/cgi-bin/nagios4
Alias /nagios4/stylesheets /etc/nagios4/stylesheets
Alias /nagios4 /usr/share/nagios4/htdocs
LDAPCacheTTL 36000
LDAPTrustedGlobalCert CA_BASE64 /etc/ssl/smsc/ca_root_certificate.pem
<DirectoryMatch (/usr/share/nagios4/htdocs|/usr/lib/cgi-bin/nagios4|/etc/nagios4/stylesheets)>
Options FollowSymLinks
DirectoryIndex index.php index.html
AllowOverride AuthConfig
<IfVersion < 2.3>
Order Allow,Deny
Allow From All
</IfVersion>
<IfVersion >= 2.3>
Require all denied
</IfVersion>
Options FollowSymLinks
AuthBasicProvider ldap
AuthType Basic
AuthName "LDAP Login"
AuthLDAPURL "[LDAP URL]"
AuthLDAPBindDN "[LDAP BIND DN]"
AuthLDAPBindPassword *****************************
Require valid-user
</DirectoryMatch>
<Directory /usr/share/nagios4/htdocs>
Options +ExecCGI
</Directory>