Re: [Nagios-users] Advanced authentication

2008-10-30 Thread Olivier JAN
I have achieved something like you describe with a Reverse Proxy SSO called Vulture NG (http://vulture.open-source.fr/wiki/). It works really well when you need to authenticate on differents nagios servers (like in a distributed setup). Maybe this can help you Olivier Jan Marc Powell <[EM

Re: [Nagios-users] Advanced authentication

2008-10-30 Thread Marc Powell
On Oct 29, 2008, at 10:37 AM, Phillips, Dustin B (DBphillips) wrote: > > Thanks for the replies. > > Ultimately what we would like to do is authenticate the user via > another > website that we already use as a "single sign-on" portal for other web > applications. Once they're logged in there,

Re: [Nagios-users] Advanced authentication

2008-10-30 Thread Paul Weaver
> applications. Once they're logged in there, we would pass their username > over to Nagios via URL querystring or hidden form value, etc (not going for > maximum security). Indeed not, anyone who wants can pretend to be anyone else. Still, if it's an internal intranet, and you capture the IP

Re: [Nagios-users] Advanced authentication

2008-10-29 Thread Phillips, Dustin B (DBphillips)
Thanks for the replies. Ultimately what we would like to do is authenticate the user via another website that we already use as a "single sign-on" portal for other web applications. Once they're logged in there, we would pass their username over to Nagios via URL querystring or hidden form value

Re: [Nagios-users] Advanced authentication

2008-10-28 Thread Patrick Morris
On Tue, 28 Oct 2008, Allan Clark wrote: > Hi Dustin; > > Be reminded that if you use this method (and it's what I used) then you need > to remember to use a wildcard (*) in your /etc/nagios/cgi.cfg to give all who > can see the CGI access via Apache the access to do it. Otherwise, Apache > ve

Re: [Nagios-users] Advanced authentication

2008-10-28 Thread Taylor Dondich
Exactly. You want to make sure a contact is setup and is assigned to the appropriate objects. The contact name should make the name authenticated by apache. Taylor On Tue, Oct 28, 2008 at 12:50 PM, Marc Powell <[EMAIL PROTECTED]> wrote: > > On Oct 28, 2008, at 2:35 PM, Allan Clark wrote: > >> H

Re: [Nagios-users] Advanced authentication

2008-10-28 Thread Marc Powell
On Oct 28, 2008, at 2:35 PM, Allan Clark wrote: > Hi Dustin; > > Be reminded that if you use this method (and it's what I used) then > you need to remember to use a wildcard (*) in your /etc/nagios/ > cgi.cfg to give all who can see the CGI access via Apache the access > to do it. Otherwise

Re: [Nagios-users] Advanced authentication

2008-10-28 Thread Marc Powell
On Oct 28, 2008, at 2:08 PM, Phillips, Dustin B (DBphillips) wrote: > Sorry if this has already been asked but I’m new to the list. > > Question: Is there an add-on or other method for enabling more > advanced authentication for Nagios or is htaccess the only method? > I’m thinking somethin

Re: [Nagios-users] Advanced authentication

2008-10-28 Thread Jim Perrin
On Tue, Oct 28, 2008 at 3:08 PM, Phillips, Dustin B (DBphillips) <[EMAIL PROTECTED]> wrote: > Question: Is there an add-on or other method for enabling more advanced > authentication for Nagios or is htaccess the only method? I'm thinking > something more like a MySQL database or LDAP, etc. Yo

Re: [Nagios-users] Advanced authentication

2008-10-28 Thread Allan Clark
Hi Dustin; Be reminded that if you use this method (and it's what I used) then you need to remember to use a wildcard (*) in your /etc/nagios/cgi.cfg to give all who can see the CGI access via Apache the access to do it. Otherwise, Apache verifies their user/pass, but the Nagios CGI denies them.

Re: [Nagios-users] Advanced authentication

2008-10-28 Thread Taylor Dondich
You can use any type of authentication that apache supports. For both of your suggestions, you should look at: LDAP Authentication http://httpd.apache.org/docs/2.2/mod/mod_authnz_ldap.html Database backend Authentication http://httpd.apache.org/docs/2.2/mod/mod_authn_dbd.html Taylor On Tue, Oc

Re: [Nagios-users] Advanced authentication

2008-10-28 Thread Andy Shellam
Hi Dustin, As the htaccess authentication is provided by Apache, you can certainly use any authentication Apache supports (LDAP, SQL etc.) See the following Apache manual pages: http://httpd.apache.org/docs/2.2/howto/auth.html - htaccess authentication howto http://httpd.apache.org/docs/2.2/mo

[Nagios-users] Advanced authentication

2008-10-28 Thread Phillips, Dustin B (DBphillips)
Sorry if this has already been asked but I¹m new to the list. Question: Is there an add-on or other method for enabling more advanced authentication for Nagios or is htaccess the only method? I¹m thinking something more like a MySQL database or LDAP, etc. Thanks, Dustin E-MAIL CONFIDENTIALI