If it's already hardened and behind a firewall then don't bother with any
additional security.  All you need is the admin user to do configuration and
shutdown - the rest is open.

-----Burton


-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gaël
Lams
Sent: Thursday, April 13, 2006 7:39 AM
To: [email protected]
Subject: Re: [Ntop] ldap authentication

> I've got no plans for same.  Ntop shouldn't be thought of as a highly 
> secure service.  It's pretty minimal authorization and restrictions
capabilities.
> If you feel that the data needs to be secured beyond casual level, 
> then you should place the ntop server behind a secure firewall or on a 
> secure network.

Thank you for answering my email.

Actually Ntop is already behind a firewall and the server is really
hardened. My ldap's interest was more one of central directory for
authentication. On the same machine (kind of monitoring server) I've nagios
and cacti and I configured both to use our central ldap directory for
authentication so that:
- I don't have to create "local users" (in mysql or htpasswd files) for each
applications
- I can enforce policies on the ldap directory such as password-aging and
password-quality and allow my colleagues, when they changed password in our
central directory, to log in, for instance in nagios, with the new password.

Kind regards,

Gaël

> -----Burton
>
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf 
> Of Gaël Lams
> Sent: Wednesday, April 05, 2006 8:41 AM
> To: [email protected]
> Subject: [Ntop] ldap authentication
>
> Hi all,
>
> I was wondering whether NTOP supports ldap authentication (does not 
> seem to) or whether this kind of authentication was maybe foreseen for a
near future.
>
> Regards,
>
> Gaël
>
> _______________________________________________
> Ntop mailing list
> [email protected]
> http://listgateway.unipi.it/mailman/listinfo/ntop
>

_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to