<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 12 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><font size="2" color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Ok, you don’ t make it easy on us. Didn’t answer any questions asked.
<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font size="2" color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">So, the only thing that is password protected is cgi-secure scripts. That’s fine.
<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font size="2" color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">I’ll ask again. Did you restart httpd?
<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font size="2" color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">And follow up questions.<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font size="2" color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Did you look in the httpd log files? Access and error?
<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Do you see a line in the access log that has a connection to a cgi-secure script without an user in the user
field?<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Any error message?<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font size="2" color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">What OS are you running? If linux, is selinux enforcing? If yes, is there selinux errors trying to access the
xymonpasswd file?<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font size="2" color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></font></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><font size="2" face="Tahoma"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";font-weight:bold">From:</span></font></b><font size="2" face="Tahoma"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Michael
Resnick [mailto:sys1002@yahoo.com] <br>
<b><span style="font-weight:bold">Sent:</span></b> Thursday, March 02, 2017 3:53 AM<br>
<b><span style="font-weight:bold">To:</span></b> xymon@xymon.com<br>
<b><span style="font-weight:bold">Subject:</span></b> Re: [Xymon] Issues with no password prompt for admin cgi<o:p></o:p></span></font></p>
</div>
</div>
<p class="MsoNormal"><font size="3" face="Times New Roman"><span style="font-size:12.0pt"><o:p> </o:p></span></font></p>
<div>
<div id="yui_3_16_0_ym19_1_1488297453171_155815">
<p class="MsoNormal" style="background:white"><font size="3" color="black" face="Helvetica"><span style="font-size:12.0pt;font-family:"Helvetica","sans-serif";color:black">Sending apache.conf as requested :<o:p></o:p></span></font></p>
</div>
<div id="yui_3_16_0_ym19_1_1488297453171_156566">
<p class="MsoNormal" style="background:white"><font size="3" color="black" face="Helvetica"><span style="font-size:12.0pt;font-family:"Helvetica","sans-serif";color:black"><o:p> </o:p></span></font></p>
</div>
<div id="yui_3_16_0_ym19_1_1488297453171_157999">
<p class="MsoNormal" style="background:white"><font size="3" color="black" face="Helvetica"><span style="font-size:12.0pt;font-family:"Helvetica","sans-serif";color:black"> This is the main Apache HTTP server configuration file. It contains the<br id="yui_3_16_0_ym19_1_1488297453171_157523">
<br>
ScriptAlias /xymon-seccgi/ "/home/xymon/cgi-secure/"<br id="yui_3_16_0_ym19_1_1488297453171_157915">
<Directory "/home/xymon/cgi-secure"><br id="yui_3_16_0_ym19_1_1488297453171_157916">
AllowOverride None<br id="yui_3_16_0_ym19_1_1488297453171_157917">
Options ExecCGI Includes<br id="yui_3_16_0_ym19_1_1488297453171_157918">
<IfModule mod_authz_core.c><br id="yui_3_16_0_ym19_1_1488297453171_157919">
# Apache 2.4+<br id="yui_3_16_0_ym19_1_1488297453171_157920">
Require all granted<br id="yui_3_16_0_ym19_1_1488297453171_157921">
</IfModule><br id="yui_3_16_0_ym19_1_1488297453171_157922">
<IfModule !mod_authz_core.c><br id="yui_3_16_0_ym19_1_1488297453171_157923">
Order deny,allow<br id="yui_3_16_0_ym19_1_1488297453171_157924">
Allow from all<br id="yui_3_16_0_ym19_1_1488297453171_157925">
</IfModule><br id="yui_3_16_0_ym19_1_1488297453171_157926">
<br id="yui_3_16_0_ym19_1_1488297453171_157927">
# Password file where users with access to these scripts are kept.<br id="yui_3_16_0_ym19_1_1488297453171_157928">
# Although expected in $XYMONHOME/etc/ by the useradm and chpasswd<br id="yui_3_16_0_ym19_1_1488297453171_157929">
# scripts, files here can be read with the "config" message type, <br id="yui_3_16_0_ym19_1_1488297453171_157930">
# which allows status-privileged clients to read arbitrary regular files <br id="yui_3_16_0_ym19_1_1488297453171_157931">
# from the directory. <br id="yui_3_16_0_ym19_1_1488297453171_157932">
# <br id="yui_3_16_0_ym19_1_1488297453171_157933">
# This file should be owned and readable only by the apache server user,<br id="yui_3_16_0_ym19_1_1488297453171_157934">
# and ideally merely a symlink to a location outside of $XYMONHOME/etc/<br id="yui_3_16_0_ym19_1_1488297453171_157935">
# <br id="yui_3_16_0_ym19_1_1488297453171_157936">
# Create it with:<br id="yui_3_16_0_ym19_1_1488297453171_157937">
# htpasswd -c /home/xymon/server/etc/xymonpasswd USERNAME<br id="yui_3_16_0_ym19_1_1488297453171_157938">
# chown apache:apache /home/xymon/server/etc/xymonpasswd<br id="yui_3_16_0_ym19_1_1488297453171_157939">
# chmod 640 /home/xymon/server/etc/xymonpasswd<br id="yui_3_16_0_ym19_1_1488297453171_157940">
# Add more users / change passwords with: "htpasswd /home/xymon/server/etc/xymonpasswd USERNAME"<br id="yui_3_16_0_ym19_1_1488297453171_157941">
#<br id="yui_3_16_0_ym19_1_1488297453171_157942">
# You can also use a group file to restrict admin access to members of a<br id="yui_3_16_0_ym19_1_1488297453171_157943">
# group, instead of anyone who is logged in. In that case you must setup<br id="yui_3_16_0_ym19_1_1488297453171_157944">
# the "xymongroups" file, and change the "Require" settings to require<br id="yui_3_16_0_ym19_1_1488297453171_157945">
# a specific group membership. See the Apache docs for more details.<br id="yui_3_16_0_ym19_1_1488297453171_157946">
<br id="yui_3_16_0_ym19_1_1488297453171_157947">
AuthUserFile /home/xymon/server/etc/xymonpasswd<br id="yui_3_16_0_ym19_1_1488297453171_157948">
AuthGroupFile /home/xymon/server/etc/xymongroups<br id="yui_3_16_0_ym19_1_1488297453171_157949">
AuthType Basic<br id="yui_3_16_0_ym19_1_1488297453171_157950">
AuthName "Xymon Administration"<br id="yui_3_16_0_ym19_1_1488297453171_157951">
<br id="yui_3_16_0_ym19_1_1488297453171_157952">
# "valid-user" restricts access to anyone who is logged in.<br id="yui_3_16_0_ym19_1_1488297453171_157953">
Require valid-user<br id="yui_3_16_0_ym19_1_1488297453171_157954">
<br id="yui_3_16_0_ym19_1_1488297453171_157955">
# "group admins" restricts access to users who have logged in, AND<br id="yui_3_16_0_ym19_1_1488297453171_157956">
# are members of the "admins" group in xymongroups.<br id="yui_3_16_0_ym19_1_1488297453171_157957">
# Require group admins<br id="yui_3_16_0_ym19_1_1488297453171_157958">
<br id="yui_3_16_0_ym19_1_1488297453171_157959">
</Directory><br id="yui_3_16_0_ym19_1_1488297453171_157960">
<br>
<o:p></o:p></span></font></p>
</div>
</div>
</div>
<center>This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately
notify the sender by reply e-mail and destroy all copies of the communication and any attachments.</center>
</body>
</html>