Securing Hobbit from visitors

I got a working configuration in Solaris 10 with apache 2.x server.
What is your OS and apache version ?

lets document the fix here when problem is resolved.

http://en.wikibooks.org/wiki/System_Monitoring_with_Hobbit/Administration_Guide#LDAP_Authentication

tj

From: "Dirk Kastens" <user-e4253f8fc63b@xymon.invalid>
Sent: Thursday, March 13, 2008 2:01 AM
To: <user-ae9b8668bcde@xymon.invalid>
Subject: Re: [hobbit] Securing Hobbit from visitors

Josh Luthman schrieb:

Forgot all about that - I originally had the lines...

AuthName "Hobbit Monitoring"

Then I added the 1, 2 and 3 to the ends of them to identify/confirm where the secondary and tertiary logins were coming from (obviously, the Alias statements =)

There was no change before/after the number after the AuthName

Then I don't know why it didn't work. I have the following configuration in my httpd.conf:

ScriptAlias /hobbit-cgi/ "/data1/hobbit/cgi-bin/"
<Directory "/data1/hobbit/cgi-bin">
...
    AuthName "LDAP-Kennung"
    AuthType basic
    AuthLDAPEnabled on
...
require user userA userB userC
</Directory>

ScriptAlias /hobbit-seccgi/ "/data1/hobbit/cgi-secure/"
<Directory "/data1/hobbit/cgi-secure">
...
    AuthName "LDAP-Kennung"
    AuthType basic
    AuthLDAPEnabled on
...
    require user userB userD
</Director>

When userB calls a script under /hobbit-cgi he has to authenticate against LDAP. When he then calls a script under /hobbit-seccgi he doesn't have to authenticate again, because apache regognizes the he already authenticated against the AuthName "LDAP-Kennung".

Regards,

Dirk Kastens
Universitaet Osnabrueck, Rechenzentrum (Computer Center)
Albrechtstr. 28, 49069 Osnabrueck, Germany
Tel.: +XX-XXX-XXX-XXXX, FAX: -2470