The instructions in that blog post you sent me did the trick - thanks so much!
Sarah -- SWAMP Developer, High Throughput Computing Group Indiana University Research Technologies division of UITS; Research Technologies is a PTI Cyberinfrastructure & Service Center. On 8/8/13 8:24 AM, "Schmiechen, Sarah" <schmi...@iu.edu> wrote: >Thanks Michael and David - I'll look into this. > >Sarah > >-- >SWAMP Developer, High Throughput Computing Group >Indiana University Research Technologies division of UITS; Research >Technologies is a PTI Cyberinfrastructure & Service Center. > > > > > > >On 8/7/13 6:33 PM, "Michael Friedrich" <michael.friedr...@gmail.com> >wrote: > >>On 07.08.2013 22:45, Schmiechen, Sarah wrote: >>> Hello, >>> >>> I've implemented LDAP password authentication for my icinga-web >>> instance, and want to force communication with SSL. I tried following >>> the instructions here: >>> >>> http://docs.icinga.org/latest/en/cgisecurity.html >> >>that's more or less the documentation for the classic ui (cgis). >> >>there's 2 locations for ssl >> >>- the apache configuration for the virtualhost / directory requiring ssl >>- auth provider in icinga web talking ldaps >> >>if the first works well with the mentioned documentation, it's fine (but >>one might open a docs issue to add that to icinga web configuration - or >>create a wiki page in the howto space by yourself and help others. >> >>> >>> About adding SSLRequreSSL, and that worked fine, but I also want to >>> redirect from http to https, and from what I understand, I need to >>> turn back off SSLRequireSSL and use a RewriteRule instead has anyone >>> done this? Or used a different approach? There are a couple of >>> RewriteRules already in icinga-web.conf and I'm not sure how a new >>> rule will interact my attempts so far have been fruitless. >> >>Depends how deep you wanna dig - require ssl on all websites served by >>apache, or just icinga web? >> >>Either way, you might find that blog article interesting then: >>http://mbrownnyc.wordpress.com/technology-solutions/reliability-monitorin >>g >>-solution/implement-icinga-on-centos6-with-selinux/ >> >>kind regards, >>michael >> >>-- >>DI (FH) Michael Friedrich >> >>mail: michael.friedr...@gmail.com >>twitter: https://twitter.com/dnsmichi >>jabber: dnsmi...@jabber.ccc.de >>irc: irc.freenode.net/icinga dnsmichi >> >>icinga open source monitoring >>position: lead core developer >>url: https://www.icinga.org >> >> >>------------------------------------------------------------------------- >>- >>---- >>Get 100% visibility into Java/.NET code with AppDynamics Lite! >>It's a free troubleshooting tool designed for production. >>Get down to code-level detail for bottlenecks, with <2% overhead. >>Download for free and get started troubleshooting in minutes. >>http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clkt >>r >>k >>_______________________________________________ >>icinga-users mailing list >>icinga-users@lists.sourceforge.net >>https://lists.sourceforge.net/lists/listinfo/icinga-users > > >-------------------------------------------------------------------------- >---- >Get 100% visibility into Java/.NET code with AppDynamics Lite! >It's a free troubleshooting tool designed for production. >Get down to code-level detail for bottlenecks, with <2% overhead. >Download for free and get started troubleshooting in minutes. >http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clktr >k >_______________________________________________ >icinga-users mailing list >icinga-users@lists.sourceforge.net >https://lists.sourceforge.net/lists/listinfo/icinga-users ------------------------------------------------------------------------------ Get 100% visibility into Java/.NET code with AppDynamics Lite! It's a free troubleshooting tool designed for production. Get down to code-level detail for bottlenecks, with <2% overhead. Download for free and get started troubleshooting in minutes. http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clktrk _______________________________________________ icinga-users mailing list icinga-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/icinga-users
