[Pkg-nagios-devel] Bug#892628: icinga-web: Ships Apache 2.2 config

[Axel Beckert]

Package: icinga-web
Severity: grave
Version: 1.13.4-2
Control: found -1 1.11.6-1

Hi,

at the Debian booth at Chemnitzer Linux-Tage a user of icinga-cgi
(X-Debbugs-Cc'ed) showed up who had issues with replacing Nagios with
Icinga 1 on Jessie, because icinga-cgi in Jessie still ships and
installs an Apache 2.2 configuration incompatible with Apache 2.4 in
Debian Jessie. He said that installing icinga-cgi breaks the existing
Apache configuration because of that and Apache refuses to start up
anymore until you fix the config syntax.

This makes icinga-cgi breaking an unrelated package (apache2 and
friends do not depend on icinga-web), hence RC-severity.

I just checked icinga-cgi in unstable and testing, and the config
shipped in there still has Apache 2.2 syntax:

---snip---
# apache configuration for icinga

ScriptAlias /cgi-bin/icinga /usr/lib/cgi-bin/icinga

# Where the stylesheets (config files) reside
Alias /icinga/stylesheets /etc/icinga/stylesheets

# Where the HTML pages live
Alias /icinga /usr/share/icinga/htdocs

<DirectoryMatch "^(?:/usr/share/icinga/htdocs|/usr/lib/cgi-bin/icinga|/etc/icinga/stylesheets)/">
        Options FollowSymLinks

        DirectoryIndex index.html

        AllowOverride AuthConfig
        Order Allow,Deny    <----- Apache 2.2
        Allow From All      <----- Apache 2.2

        AuthName "Icinga Access"
        AuthType Basic
        AuthUserFile /etc/icinga/htpasswd.users
        Require valid-user
</DirectoryMatch>

<Directory "/usr/share/javascript/">
    Options FollowSymLinks MultiViews
</Directory>
---snap---

One possible short-term solution, at least for Jessie, would be to not
only enable mod_cgi in postinst, but also mod_access_compat.

Alternatively (and not that more complicated) the config file shipped
needs to be patched for Apache 2.4 syntax.

-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (990, 'unstable'), (980, 'unstable-debug'), (600, 'testing'), (111, 'buildd-unstable'), (111, 'buildd-experimental'), (110, 'experimental'), (105, 'experimental-debug')
Architecture: amd64 (x86_64)

Kernel: Linux 4.14.0-3-amd64 (SMP w/4 CPU cores)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE=C.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled