AD user login to Nagios - unable to execute CGI scripts in apache
 

Hi everyone

I have a nagios server monitoring around a 1000 hosts in our office. To make things easier, i've integrated apache into Active Directory for the website authentication. This works perfectly, however the Nagios website uses alot of CGI scripts to display information

I get the message below when trying to show CGI scripts with an AD user. Local users work fine.


403 Forbidden

You don't have permission to access /nagios/cgi-bin/status.cgi on this server.


Has anyone had any experience with CGI permissions in Apache for remote user authentication? I tried adding the AD users to the cgi.conf file within Nagios (which works for local accounts) but it doesn't seem to work even with this change.







Thanks for any suggestions.



Mac

I'm not familiar with Nagios, but, if apache is executing those CGI scripts, then the problem is likely that the user the apache process is running as does not have execute permissions on the scripts or access to containing directory. On the Solaris web servers running Apache 2.2 that I work on, the apache server runs as the nobody user, so, we set the ownership of the cgi directory and the scripts it contains to nobody and the group to the one used by our web server admins (which the nobody user is NOT a member of) and set the permissions to 570 on both the directory and the executable scripts.
That insures that "nobody" can read and execute the CGI scripts.

Derek