Apache Digest authentication

[aaronagios]

from: https://support.nagios.com/forum/viewtopic.php?t=76397

The specific steps I took that caused me to encounter the problem with authentication:

1. Configure /etc/nagios4/cgi.cfg to use_authentication=1.
2. sudo htdigest -c /etc/apache2/.htdigest.users "Digest Authentication" admin
3. Copy the following apache2.conf to /etc/nagios4: https://docs.google.com/document/d/1BmN ... sp=sharing
4. sudo ln -fs /etc/nagios4/apache2.conf /etc/apache2/conf-available/nagios-cgi.conf (This symlink is missing and should be enabled by default.)
5. sudo systemctl restart apache2
6. Access localhost/nagios4 through a web browser.

I expected a login prompt, but it did not appear.

use_authentication=1 is the default setting for /etc/nagios4/cgi.cfg. This appears to be broken and set to use_authentication=0 regardless of the setting.

By the way, I tested this configuration on Ubuntu Server 24.04.

[dougnazar]

This looks like basic Apache configuration errors. In particular in the original file the <RequireAll> section was in the <Files> section and protected just accessing the cmd.cgi. The comments document moving that to the outer <DirectoryMatch> but you'll also need to remove the Require ip line as that will override the previous Require and allow access without authentication.

AuthDigestDomain should also match the urls in use, ie. "/nagios4/" "/cgi-bin/nagios4/", and it should also be noted that auth_digest is no longer recommended.