[omd-users] Mostly solved: Re: pnp auth?
jailbait at gmail.com
Sat Mar 31 02:35:30 CEST 2012
The problem here was the auth.conf I'd imported from my working Nagios
and somehow - and I don't really know how - all the other
in various other files didn't manage to override that one.
Now, the interesting problem I'm poking at is: I've copied the
auth.conf from DC over to Seattle and now I'm getting
"You are not logged in. This should never happen. Please review your
Apache configuration. Check_MK Multisite requires HTTP login."
both via multisite/dc and directly via http://seattle/omd/seattle
But I suspect that's me.
Thanks again to Scott for the hint here, too.
On Fri, Mar 30, 2012 at 3:36 PM, JB Segal <jailbait at gmail.com> wrote:
> The next step in my omd/check_mk conversion is ldap auth for my users.
> Once I realized that 'AuthzLDAP' is NOT the same thing as
> 'AuthnzLDAP', the basic setup for omd/multisite went fine, but now I'm
> getting Forbidden on the pnp popups and pages.
> I've found ~/etc/pnp4nagios/config.php, copied it over to
> config_local.php and tweaked this:
> # # check authorization against mk_livestatus API
> # # Available since 0.6.10
> # #
> $conf['auth_enabled'] = TRUE;
> # #
> # # Which user is allowed to see all services or all hosts?
> # # Keywords: <USERNAME>
> # # Example: conf['allowed_for_all_services'] = "nagiosadmin,operator";
> # # This option is used while $conf['auth_enabled'] = TRUE
> $conf['allowed_for_all_services'] = "omdadmin,jbsegal";
> $conf['allowed_for_all_hosts'] = "omdadmin,jbsegal";
> and yet, after an omd restart apache, I'm still getting
> | Forbidden
> | You don't have permission to access
> /prod_dc/pnp4nagios/index.php/graph on this server.
> Even setting it to "EVERYONE" doesn't work, nor does setting
> auth_enabled back to FALSE while 'allowed_for_all_*' is set to either
> names or EVERYONE.
> I haven't found any good docs on this as yet, just
> http://omdistro.org/wiki/omd/Pnp4nagios and then to
> where ?do=search&id=%22allowed_for_all%22
> turns up 0 hits.
> (I'll write up the pending answer report after I give my boss his
> weekly status...)
> Thanks in advance,
More information about the omd-users