On 08.08.2013 14:41, Schmiechen, Sarah wrote:
> The instructions in that blog post you sent me did the trick - thanks so
> much!

can you share it with us, or create a wiki entry here then? :-)

https://wiki.icinga.org/display/howtos/Configuration+Guides

thanks,
Michael

> 
> Sarah
> 
> --
> SWAMP Developer, High Throughput Computing Group
> Indiana University Research Technologies division of UITS; Research
> Technologies is a PTI Cyberinfrastructure&  Service Center.
> 
> 
> 
> 
> 
> 
> On 8/8/13 8:24 AM, "Schmiechen, Sarah"<schmi...@iu.edu>  wrote:
> 
>> Thanks Michael and David - I'll look into this.
>>
>> Sarah
>>
>> --
>> SWAMP Developer, High Throughput Computing Group
>> Indiana University Research Technologies division of UITS; Research
>> Technologies is a PTI Cyberinfrastructure&  Service Center.
>>
>>
>>
>>
>>
>>
>> On 8/7/13 6:33 PM, "Michael Friedrich"<michael.friedr...@gmail.com>
>> wrote:
>>
>>> On 07.08.2013 22:45, Schmiechen, Sarah wrote:
>>>> Hello,
>>>>
>>>> I've implemented LDAP password authentication for my icinga-web
>>>> instance, and want to force communication with SSL. I tried following
>>>> the instructions here:
>>>>
>>>> http://docs.icinga.org/latest/en/cgisecurity.html
>>>
>>> that's more or less the documentation for the classic ui (cgis).
>>>
>>> there's 2 locations for ssl
>>>
>>> - the apache configuration for the virtualhost / directory requiring ssl
>>> - auth provider in icinga web talking ldaps
>>>
>>> if the first works well with the mentioned documentation, it's fine (but
>>> one might open a docs issue to add that to icinga web configuration - or
>>> create a wiki page in the howto space by yourself and help others.
>>>
>>>>
>>>> About adding SSLRequreSSL, and that worked fine, but I also want to
>>>> redirect from http to https, and from what I understand, I need to
>>>> turn back off SSLRequireSSL and use a RewriteRule instead ­ has anyone
>>>> done this? Or used a different approach? There are a couple of
>>>> RewriteRules already in icinga-web.conf and I'm not sure how a new
>>>> rule will interact ­ my attempts so far have been fruitless.
>>>
>>> Depends how deep you wanna dig - require ssl on all websites served by
>>> apache, or just icinga web?
>>>
>>> Either way, you might find that blog article interesting then:
>>> http://mbrownnyc.wordpress.com/technology-solutions/reliability-monitorin
>>> g
>>> -solution/implement-icinga-on-centos6-with-selinux/
>>>
>>> kind regards,
>>> michael
>>>
>>> -- 
>>> DI (FH) Michael Friedrich
>>>
>>> mail:     michael.friedr...@gmail.com
>>> twitter:  https://twitter.com/dnsmichi
>>> jabber:   dnsmi...@jabber.ccc.de
>>> irc:      irc.freenode.net/icinga dnsmichi
>>>
>>> icinga open source monitoring
>>> position: lead core developer
>>> url:      https://www.icinga.org
>>>
>>>
>>> -------------------------------------------------------------------------
>>> -
>>> ----
>>> Get 100% visibility into Java/.NET code with AppDynamics Lite!
>>> It's a free troubleshooting tool designed for production.
>>> Get down to code-level detail for bottlenecks, with<2% overhead.
>>> Download for free and get started troubleshooting in minutes.
>>> http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clkt
>>> r
>>> k
>>> _______________________________________________
>>> icinga-users mailing list
>>> icinga-users@lists.sourceforge.net
>>> https://lists.sourceforge.net/lists/listinfo/icinga-users
>>
>>
>> --------------------------------------------------------------------------
>> ----
>> Get 100% visibility into Java/.NET code with AppDynamics Lite!
>> It's a free troubleshooting tool designed for production.
>> Get down to code-level detail for bottlenecks, with<2% overhead.
>> Download for free and get started troubleshooting in minutes.
>> http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clktr
>> k
>> _______________________________________________
>> icinga-users mailing list
>> icinga-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/icinga-users
> 
> ------------------------------------------------------------------------------
> Get 100% visibility into Java/.NET code with AppDynamics Lite!
> It's a free troubleshooting tool designed for production.
> Get down to code-level detail for bottlenecks, with<2% overhead.
> Download for free and get started troubleshooting in minutes.
> http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clktrk
> _______________________________________________
> icinga-users mailing list
> icinga-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/icinga-users


-- 
DI (FH) Michael Friedrich

mail:     michael.friedr...@gmail.com
twitter:  https://twitter.com/dnsmichi
jabber:   dnsmi...@jabber.ccc.de
irc:      irc.freenode.net/icinga dnsmichi

icinga open source monitoring
position: lead core developer
url:      https://www.icinga.org

------------------------------------------------------------------------------
Get 100% visibility into Java/.NET code with AppDynamics Lite!
It's a free troubleshooting tool designed for production.
Get down to code-level detail for bottlenecks, with <2% overhead. 
Download for free and get started troubleshooting in minutes. 
http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clktrk
_______________________________________________
icinga-users mailing list
icinga-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/icinga-users

Reply via email to