Hi, I added something here: https://wiki.icinga.org/display/howtos/Force+icinga-web+to+use+https+%28SSL %29+on+Linux I'm not familiar with this wiki software, so I don't know how to make the pre-formatted code show up in those nice boxes, sorry!
The step I took, that I was missing, was to add those three lines to httpd.conf. However, since I'd been trying various things before then, it's possible that I am missing some steps in the instructions. I'm going to be moving to production hardware in the next month or so, and will be going through all these steps again, so if I find I've missed anything I'll try and remember to come back and update this. Thanks, Sarah -- SWAMP Developer, High Throughput Computing Group Indiana University Research Technologies division of UITS; Research Technologies is a PTI Cyberinfrastructure & Service Center. On 8/8/13 8:49 AM, "Michael Friedrich" <michael.friedr...@gmail.com> wrote: >On 08.08.2013 14:41, Schmiechen, Sarah wrote: >> The instructions in that blog post you sent me did the trick - thanks so >> much! > >can you share it with us, or create a wiki entry here then? :-) > >https://wiki.icinga.org/display/howtos/Configuration+Guides > >thanks, >Michael > >> >> Sarah >> >> -- >> SWAMP Developer, High Throughput Computing Group >> Indiana University Research Technologies division of UITS; Research >> Technologies is a PTI Cyberinfrastructure& Service Center. >> >> >> >> >> >> >> On 8/8/13 8:24 AM, "Schmiechen, Sarah"<schmi...@iu.edu> wrote: >> >>> Thanks Michael and David - I'll look into this. >>> >>> Sarah >>> >>> -- >>> SWAMP Developer, High Throughput Computing Group >>> Indiana University Research Technologies division of UITS; Research >>> Technologies is a PTI Cyberinfrastructure& Service Center. >>> >>> >>> >>> >>> >>> >>> On 8/7/13 6:33 PM, "Michael Friedrich"<michael.friedr...@gmail.com> >>> wrote: >>> >>>> On 07.08.2013 22:45, Schmiechen, Sarah wrote: >>>>> Hello, >>>>> >>>>> I've implemented LDAP password authentication for my icinga-web >>>>> instance, and want to force communication with SSL. I tried following >>>>> the instructions here: >>>>> >>>>> http://docs.icinga.org/latest/en/cgisecurity.html >>>> >>>> that's more or less the documentation for the classic ui (cgis). >>>> >>>> there's 2 locations for ssl >>>> >>>> - the apache configuration for the virtualhost / directory requiring >>>>ssl >>>> - auth provider in icinga web talking ldaps >>>> >>>> if the first works well with the mentioned documentation, it's fine >>>>(but >>>> one might open a docs issue to add that to icinga web configuration - >>>>or >>>> create a wiki page in the howto space by yourself and help others. >>>> >>>>> >>>>> About adding SSLRequreSSL, and that worked fine, but I also want to >>>>> redirect from http to https, and from what I understand, I need to >>>>> turn back off SSLRequireSSL and use a RewriteRule instead has >>>>>anyone >>>>> done this? Or used a different approach? There are a couple of >>>>> RewriteRules already in icinga-web.conf and I'm not sure how a new >>>>> rule will interact my attempts so far have been fruitless. >>>> >>>> Depends how deep you wanna dig - require ssl on all websites served by >>>> apache, or just icinga web? >>>> >>>> Either way, you might find that blog article interesting then: >>>> >>>>http://mbrownnyc.wordpress.com/technology-solutions/reliability-monitor >>>>in >>>> g >>>> -solution/implement-icinga-on-centos6-with-selinux/ >>>> >>>> kind regards, >>>> michael >>>> >>>> -- >>>> DI (FH) Michael Friedrich >>>> >>>> mail: michael.friedr...@gmail.com >>>> twitter: https://twitter.com/dnsmichi >>>> jabber: dnsmi...@jabber.ccc.de >>>> irc: irc.freenode.net/icinga dnsmichi >>>> >>>> icinga open source monitoring >>>> position: lead core developer >>>> url: https://www.icinga.org >>>> >>>> >>>> >>>>----------------------------------------------------------------------- >>>>-- >>>> - >>>> ---- >>>> Get 100% visibility into Java/.NET code with AppDynamics Lite! >>>> It's a free troubleshooting tool designed for production. >>>> Get down to code-level detail for bottlenecks, with<2% overhead. >>>> Download for free and get started troubleshooting in minutes. >>>> >>>>http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.cl >>>>kt >>>> r >>>> k >>>> _______________________________________________ >>>> icinga-users mailing list >>>> icinga-users@lists.sourceforge.net >>>> https://lists.sourceforge.net/lists/listinfo/icinga-users >>> >>> >>> >>>------------------------------------------------------------------------ >>>-- >>> ---- >>> Get 100% visibility into Java/.NET code with AppDynamics Lite! >>> It's a free troubleshooting tool designed for production. >>> Get down to code-level detail for bottlenecks, with<2% overhead. >>> Download for free and get started troubleshooting in minutes. >>> >>>http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clk >>>tr >>> k >>> _______________________________________________ >>> icinga-users mailing list >>> icinga-users@lists.sourceforge.net >>> https://lists.sourceforge.net/lists/listinfo/icinga-users >> >> >>------------------------------------------------------------------------- >>----- >> Get 100% visibility into Java/.NET code with AppDynamics Lite! >> It's a free troubleshooting tool designed for production. >> Get down to code-level detail for bottlenecks, with<2% overhead. >> Download for free and get started troubleshooting in minutes. >> >>http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clkt >>rk >> _______________________________________________ >> icinga-users mailing list >> icinga-users@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/icinga-users > > >-- >DI (FH) Michael Friedrich > >mail: michael.friedr...@gmail.com >twitter: https://twitter.com/dnsmichi >jabber: dnsmi...@jabber.ccc.de >irc: irc.freenode.net/icinga dnsmichi > >icinga open source monitoring >position: lead core developer >url: https://www.icinga.org > >-------------------------------------------------------------------------- >---- >Get 100% visibility into Java/.NET code with AppDynamics Lite! >It's a free troubleshooting tool designed for production. >Get down to code-level detail for bottlenecks, with <2% overhead. >Download for free and get started troubleshooting in minutes. >http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clktr >k >_______________________________________________ >icinga-users mailing list >icinga-users@lists.sourceforge.net >https://lists.sourceforge.net/lists/listinfo/icinga-users ------------------------------------------------------------------------------ Get 100% visibility into Java/.NET code with AppDynamics Lite! It's a free troubleshooting tool designed for production. Get down to code-level detail for bottlenecks, with <2% overhead. Download for free and get started troubleshooting in minutes. http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clktrk _______________________________________________ icinga-users mailing list icinga-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/icinga-users
