Bug#931664: nagios4: Broken configuration according to apache2_reload

[Mitchell Bond]

I also came across this issue,

the authz_groupfile module in apache is not enabled. To enable issue
the following command.

# a2enmod authz_groupfile

Then restart Apache.

To completely remove any authentication (which is apparently the
default configuration in Debian) modify the DirectoryMatch section in
the file "/etc/apache2/conf-available/nagios4-cgi.conf" with the
following. (Comment out all the Auth part and add "Order allow,deny"
and "Allow from all")



Options FollowSymLinks
DirectoryIndex index.php index.html
AllowOverride AuthConfig
#
# The default Debian nagios4 install sets use_authentication=0 in
# /etc/nagios4/cgi.cfg, which turns off nagos's internal 
# authentication.
# This is insecure.  As a compromise this default apache2 
# configuration
# only allows private IP addresses access.
#
# The ... below shows how you can secure the nagios4
# web site so anybody can view it, but only authenticated users
# can issue
# commands (such as silence notifications).  To do that replace the
# "Require all granted" with "Require valid-user", and use htdigest
# program from the apache2-utils package to add users to
# /etc/nagios4/htdigest.users.
#
# A step up is to insist all users validate themselves by moving
# the stanza's in the .. into the .
# Then by setting use_authentication=1 in /etc/nagios4/cgi.cfg you
# can configure which people get to see a particular service from
# within the nagios configuration.
# 

#Require allgranted
#AuthDigestDomain "/nagios4"
#AuthDigestProvider file
#AuthUserFile   "/etc/nagios4/htdigest.users"
#AuthGroupFile  "/etc/null"
#AuthName   "Nagios4"
#AuthType   Digest
#Requirevalid-user
Order allow,deny
Allow from all

Bug#931664: nagios4: Broken configuration according to apache2_reload

[Jorge Maldonado Ventura]

Package: nagios4
Version: 4.3.4-3
Severity: important

Dear Maintainer,

*** Reporter, please consider answering these questions, where appropriate ***

   * What led up to the situation?

After the installation, I cannot access the web interface
(http://localhost/nagios), and I get the following output
from `journalctl -xe`

[...]
Jul 08 18:18:46 falcot nagios4-cgi[13212]: apache2_invoke: Enable configuration
nagios4-cgi
Jul 08 18:18:46 falcot nagios4-cgi[13217]: apache2_reload: Your configuration
is broken. Not reloading
Jul 08 18:18:46 falcot nagios4-cgi[13220]: apache2_reload: AH00526: Syntax
error on line 37 of /etc/apa
Jul 08 18:18:46 falcot nagios4-cgi[13221]: apache2_reload: Invalid command
'AuthDigestDomain', perhaps
[...]


   * What exactly did you do (or not do) that was effective (or
 ineffective)?

I executed /sbin/a2enmod authz_groupfile and restarted the Apache2 server with
`systemctl restart apache2`.

   * What was the outcome of this action?

Job for apache2.service failed because the control process exited with error
code.
See "systemctl status apache2.service" and "journalctl -xe" for details.

And from `journalctl -xe` I got:

Jul 08 18:44:46 falcot apachectl[14775]: AH00526: Syntax error on line 37 of
/etc/apache2/conf-enabled/nagios4-c
Jul 08 18:44:46 falcot apachectl[14775]: Invalid command 'AuthDigestDomain',
perhaps misspelled or defined by a
Jul 08 18:44:46 falcot apachectl[14775]: Action 'start' failed.
Jul 08 18:44:46 falcot apachectl[14775]: The Apache error log may have more
information.

I didn't found anything relevant in the Apache error log.

   * What outcome did you expect instead?

I expected the package to work out-of-the-box.



-- System Information:
Debian Release: 10.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-5-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages nagios4 depends on:
ii  nagios4-cgi 4.3.4-3
ii  nagios4-common  4.3.4-3
ii  nagios4-core4.3.4-3

nagios4 recommends no packages.

Versions of packages nagios4 suggests:
pn  nagios-nrpe-plugin  

-- no debconf information