Yes, monit reads the configuration from file and it requires strict permissions on this file so it is readable only by owner.

I think it could be good to introduce new command line options which will allow to specify username, password and port so any local user can run monit CLI without need to access the configuration file.

Martin


On Jun 16, 2009, at 12:15 AM, Mike Place wrote:

I have done so but when I become the user I wish to use to invoke monit I get an error indicating:

'monit: The control file '/etc/monitrc' must be owned by you.'

It /etc/monitrc is owned by root, are all non-root users prohibited from invoking any monit command from the command-line?


-mp



----- Original Message -----
From: "Martin Pala" <[email protected]>
To: "Mike Place" <[email protected]>
Cc: [email protected]
Sent: Saturday, June 13, 2009 1:48:47 AM GMT -07:00 US/Canada Mountain
Subject: Re: httpd authentication question

No,

but if you need localhost access for monit CLI commands (such as
status, start, stop, etc.), then you can add "allow <user>:<password>"
to monitrc and monit CLI will read and use the credentials
automatically when talking to monit httpd.

Martin


On Jun 12, 2009, at 11:36 PM, Mike Place wrote:

Hello,

Is it possible to configure monit's HTTPD in such a way as to allow
localhost unauthenticated access while still forcing other host to
authenticate via PAM?

-mp




--
To unsubscribe:
http://lists.nongnu.org/mailman/listinfo/monit-general

Reply via email to