http://bugzilla.opensuse.org/show_bug.cgi?id=954273 Bug ID: 954273 Summary: apache 2.4 http authentication don't work Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.1 Hardware: x86-64 OS: openSUSE 42.1 Status: NEW Severity: Major Priority: P5 - None Component: Apache Assignee: bnc-team-apache@forge.provo.novell.com Reporter: diego.ercolani@gmail.com QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- Created attachment 655207 --> http://bugzilla.opensuse.org/attachment.cgi?id=655207&action=edit /etc/apache2/conf.d/nagios.conf I upgraded a system from openSUSE_13.2 to openSUSE_leap_42.1. It's my Nagios installation. Since then I cannot use nagios-www because it seem that apache2 don't ask for authentication and nagioscgi say: "It appears as though you do not have permission to view information for any of the hosts you requested... If you believe this is an error, check the HTTP server authentication requirements for accessing this CGI and check the authorization options in your CGI configuration file." but the configuration for http authentication seem correct: apache2-utils-2.4.16-7.1.x86_64 apache2-2.4.16-7.1.x86_64 apache2-prefork-2.4.16-7.1.x86_64 apache2-mod_php5-5.5.14-36.5.x86_64 apache_modules: APACHE_MODULES="autoindex cgi php5 version info log_config authz_core authz_host mime alias dir authn_core authn_file authz_basic authz_user auth_basic" I attached the /etc/apache2/conf.d/nagios.conf. To prove the fact that apache2 isn't evaluating my authentication settings I used the mod_info and configured a "location" using authentication settings: SetHandler server-info Require all granted AuthName "Nagios Access" AuthType Basic AuthUserFile /etc/nagios/htpasswd.users Require valid-user AuthBasicProvider file </Location> when I try to connect to /server-info the apache 2.4.16 don't ask for authentication and give me the configuration: Server Settings Server Version: Apache/2.4.16 (Linux/SUSE) Server Built: 2015-10-21 13:01:59.000000000 +0000 Server loaded APR Version: 1.5.1 Compiled with APR Version: 1.5.1 Server loaded APU Version: 1.5.3 Compiled with APU Version: 1.5.3 Module Magic Number: 20120211:47 Hostname/port: nagios.carisp.lan:80 Timeouts: connection: 60 keep-alive: 15 MPM Name: prefork MPM Information: Max Daemons: 150 Threaded: no Forked: yes Server Architecture: 64-bit Server Root: /srv/www Config File: -c/-C directives Server Built With: -D APR_HAS_SENDFILE -D APR_HAS_MMAP -D APR_HAVE_IPV6 (IPv4-mapped addresses enabled) -D APR_USE_PROC_PTHREAD_SERIALIZE -D SINGLE_LISTEN_UNSERIALIZED_ACCEPT -D APR_HAS_OTHER_CHILD -D AP_HAVE_RELIABLE_PIPED_LOGS -D HTTPD_ROOT="/srv/www" -D SUEXEC_BIN="/usr/sbin/suexec" -D DEFAULT_PIDLOG="/run/httpd.pid" -D DEFAULT_SCOREBOARD="logs/apache_runtime_status" -D DEFAULT_ERRORLOG="/var/log/apache2/error_log" -D AP_TYPES_CONFIG_FILE="/etc/apache2/mime.types" -D SERVER_CONFIG_FILE="/etc/apache2/httpd.conf" look what system-info say about the authorization: In file: /etc/apache2/conf.d/nagios.conf 10: 11: SetHandler server-info : </Location> 20: 22: Options ExecCGI 23: AllowOverride None : </Directory> 51: 53: Options None 54: AllowOverride None : </Directory> -- You are receiving this mail because: You are on the CC list for the bug.