[Nagios-users] Re: How to Loggout?
Leonardo Henrique Machado
leoh at dcc.ufmg.br
Fri Jun 4 15:05:53 CEST 2004
Devel Team,
are you all thinking about a solutinon to this problema?
I realy think it's a very important feature that nagios lacks. Why cannot
Nagios handle the autentication by it self?
We could also have an admin interface to let the contacts change their
passwords. I don't think that the it would be a security hole (.htaccess
is also very unsafe).
I hope it could be in Nagios 2.0.
On Fri, 4 Jun 2004, Paul L. Allen wrote:
> Jason Martin writes:
>
> > It is actually a problem with the HTTP Spec
>
> Not really. The spec provides a simple means of authenticating yourself.
> In many cases it is reasonable to assume that you will want to keep on
> authenticating yourself. In some situations you need to be able to logout,
> and then it is up to the website to use a different means of authentication.
>
> Yahoo, Hotmail and many other sites all use a different means of
> authentication so people can logout, because these are services that are
> often accessed from internet cafes or library internet terminals. Most
> people who use Nagios have little need to be able to logout, so it was
> reasonable for Ethan to use the HTTP authentiaction mechanism.
>
> > once a password is provided for a security realm, there isn't a way to
> > get the server to 'forget' it.
>
> It is the browser that remembers the credentials, not the server. You
> may be able to fiddle it with a sub-directory which has a .htaccess
> defining the same realm but pointing to an empty password file. Going
> to a page there may cause the browser to put up another login box, which
> will fail, then the password is forgotten. Clumsy, but not as clumsy as
> restarting your browser.
>
> --
> Paul Allen
> Softflare Support
>
>
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by the new InstallShield X.
> >From Windows to Linux, servers to mobile, InstallShield X is the one
> installation-authoring solution that does it all. Learn more and
> evaluate today! http://www.installshield.com/Dev2Dev/0504
> _______________________________________________
> Nagios-users mailing list
> Nagios-users at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nagios-users
> ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue.
> ::: Messages without supporting info will risk being sent to /dev/null
>
--
Leonardo Henrique Machado
Último Período em Ciência da Computacao
Universidade Federal de Minas Gerais
-------------------------------------------------------
This SF.Net email is sponsored by the new InstallShield X.
>From Windows to Linux, servers to mobile, InstallShield X is the one
installation-authoring solution that does it all. Learn more and
evaluate today! http://www.installshield.com/Dev2Dev/0504
More information about the Developers
mailing list