Thanks Michael and David - I'll look into this.

Sarah

--
SWAMP Developer, High Throughput Computing Group
Indiana University Research Technologies division of UITS; Research
Technologies is a PTI Cyberinfrastructure & Service Center.






On 8/7/13 6:33 PM, "Michael Friedrich" <michael.friedr...@gmail.com> wrote:

>On 07.08.2013 22:45, Schmiechen, Sarah wrote:
>> Hello,
>>
>> I've implemented LDAP password authentication for my icinga-web
>> instance, and want to force communication with SSL. I tried following
>> the instructions here:
>>
>> http://docs.icinga.org/latest/en/cgisecurity.html
>
>that's more or less the documentation for the classic ui (cgis).
>
>there's 2 locations for ssl
>
>- the apache configuration for the virtualhost / directory requiring ssl
>- auth provider in icinga web talking ldaps
>
>if the first works well with the mentioned documentation, it's fine (but
>one might open a docs issue to add that to icinga web configuration - or
>create a wiki page in the howto space by yourself and help others.
>
>>
>> About adding SSLRequreSSL, and that worked fine, but I also want to
>> redirect from http to https, and from what I understand, I need to
>> turn back off SSLRequireSSL and use a RewriteRule instead ­ has anyone
>> done this? Or used a different approach? There are a couple of
>> RewriteRules already in icinga-web.conf and I'm not sure how a new
>> rule will interact ­ my attempts so far have been fruitless.
>
>Depends how deep you wanna dig - require ssl on all websites served by
>apache, or just icinga web?
>
>Either way, you might find that blog article interesting then:
>http://mbrownnyc.wordpress.com/technology-solutions/reliability-monitoring
>-solution/implement-icinga-on-centos6-with-selinux/
>
>kind regards,
>michael
>
>-- 
>DI (FH) Michael Friedrich
>
>mail:     michael.friedr...@gmail.com
>twitter:  https://twitter.com/dnsmichi
>jabber:   dnsmi...@jabber.ccc.de
>irc:      irc.freenode.net/icinga dnsmichi
>
>icinga open source monitoring
>position: lead core developer
>url:      https://www.icinga.org
>
>
>--------------------------------------------------------------------------
>----
>Get 100% visibility into Java/.NET code with AppDynamics Lite!
>It's a free troubleshooting tool designed for production.
>Get down to code-level detail for bottlenecks, with <2% overhead.
>Download for free and get started troubleshooting in minutes.
>http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clktr
>k
>_______________________________________________
>icinga-users mailing list
>icinga-users@lists.sourceforge.net
>https://lists.sourceforge.net/lists/listinfo/icinga-users


------------------------------------------------------------------------------
Get 100% visibility into Java/.NET code with AppDynamics Lite!
It's a free troubleshooting tool designed for production.
Get down to code-level detail for bottlenecks, with <2% overhead. 
Download for free and get started troubleshooting in minutes. 
http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clktrk
_______________________________________________
icinga-users mailing list
icinga-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/icinga-users

Reply via email to