Skip to main content
Solved

Anthentication imposible with HTTP

  • March 31, 2023
  • 4 replies
  • 332 views

xsamson
Forum|alt.badge.img+3

Hi,
We are in 22.10.7 Business Edition on Debian 11.
We have an authentication issue only with HTTP, no problem with HTTPS.

With HTTP, users authent successfully, and we can see them in log file /var/log/centreon/login.log


But we get the following error in apache error.log

 [proxy_fcgi:error] [pid 10112] [client **********:49267] AH01071: Got error 'PHP message: CRITICAL: You are not authorized to access this resource {"context":"[object] (Symfony\\\\Component\\\\Security\\\\Core\\\\Exception\\\\AccessDeniedException(code: 403): You are not authorized to access this resource at /usr/share/centreon/vendor/symfony/framework-bundle/Controller/AbstractController.php:358)"}\n', referer: http://srvmonitor.age.essec.fr/centreon/login

 

We get the following message on the GUI
 

Best answer by ponchoh

Hello, you need to have both MAP and Centreon under https for them to work as newer browsers block this interaction if only one is not secure. Then you need to look into your certificates and confirm that they are valid and both fall under a common CA. Does the MAP and Central work if you have both as HTTP?

4 replies

ponchoh
Centreonian
Forum|alt.badge.img+14
  • Centreonian
  • March 31, 2023

👋

 

@xsamson So you want to run under https or http? do you update your apache ini file to match all the changes? from http → https and from https → http?

🤔


xsamson
Forum|alt.badge.img+3
  • Author
  • Steward *
  • April 3, 2023

Hi,

I want to run under http, because MAP doesn’t work in https.
Currently I need to let https access because same users need to access to the platform.

 

So currently I have enabled http (which doesn’t work) and https which work without MAP


ponchoh
Centreonian
Forum|alt.badge.img+14
  • Centreonian
  • Answer
  • April 3, 2023

Hello, you need to have both MAP and Centreon under https for them to work as newer browsers block this interaction if only one is not secure. Then you need to look into your certificates and confirm that they are valid and both fall under a common CA. Does the MAP and Central work if you have both as HTTP?


xsamson
Forum|alt.badge.img+3
  • Author
  • Steward *
  • April 3, 2023

Yes MAP and Central work when we are both as HTTP