Nagios contacts case-insensitive
Posted: Wed Jun 24, 2015 5:06 am
I use LDAP for authorization in GUI. Users (contacts and their groups) associated with the hosts/services.
When user input for example "Petr" and own ldap password, he loggined but can't see any information.
When user input "petr" (as specidied in contacts.cfg), rhen everything OK - he can see information.
Is there way to learn Nagios use case-insensitive contacts for user authorization?
Here is a piece of /etc/httpd/conf.d/nagios.conf config:
Here is a piece of /usr/local/nagios/etc/cgi.cfg:
When user input for example "Petr" and own ldap password, he loggined but can't see any information.
When user input "petr" (as specidied in contacts.cfg), rhen everything OK - he can see information.
Is there way to learn Nagios use case-insensitive contacts for user authorization?
Here is a piece of /etc/httpd/conf.d/nagios.conf config:
Code: Select all
<AuthnProviderAlias ldap mydomain>
AuthLDAPURL "ldap://mydomain.loc:3268/ou=MYDOMAIN,dc=loc?sAMAccountName?sub?(objectClass=user)" NONE
AuthLDAPBindDN [email protected]
AuthLDAPBindPassword pwass0rd
</AuthnProviderAlias>
<Directory "/usr/local/nagios/sbin">
#SSLRequireSSL
Options ExecCGI
AllowOverride None
AuthType Basic
AuthzLDAPAuthoritative off
AuthBasicProvider mydomain
AuthName "Nagios LDAP Authentication"
require valid-user
</Directory>
Alias /nagios "/usr/local/nagios/share"
<Directory "/usr/local/nagios/share">
#SSLRequireSSL
Options None
AllowOverride None
AuthType Basic
AuthzLDAPAuthoritative off
AuthBasicProvider mydomain
AuthName "Nagios LDAP Authentication"
require valid-user
</Directory>
Code: Select all
use_authentication=1
use_ssl_authentication=0
#default_user_name=guest
authorized_for_system_information=nagiosadmin
authorized_for_configuration_information=nagiosadmin
authorized_for_system_commands=nagiosadmin
authorized_for_all_services=den,nike,alex,nagiosadmin
authorized_for_all_hosts=den,nike,alex,nagiosadmin
authorized_for_all_service_commands=den,nike,alex,nagiosadmin
authorized_for_all_host_commands=den,nike,alex,nagiosadmin
#authorized_for_read_only=guest