Web interface authentication
Karl DeBisschop
karl at debisschop.net
Fri Nov 15 17:50:58 CET 2002
On Fri, 2002-11-15 at 11:33, Carroll, Jim P [Contractor] wrote:
> I've wondered about that too, but I hand out guest/guest to anyone I think
> needs read-only access to the system.
>
> Maybe you could set up a null password for guest.
Im my case, some IP ranges can connect via HTTP ad get access without
login. Those sessions get guest as a default user ID.
But HTTPS always requires login, and that's the only way you can do
anything more than read data.
In apache, you could also setup 2 virtual directories that point to the
same paths on disk, and have different authentication schemes for each.
I think the key point here, however, is that you need to be looking at
your web server configs in conjunction with your nagios configs.
--
Karl
> jc
>
> > -----Original Message-----
> > From: Markus Baertschi [mailto:markus at markus.org]
> > Sent: Friday, November 15, 2002 10:04 AM
> > To: Carroll, Jim P [Contractor]; nagios-users at lists.sourceforge.net
> > Subject: RE: [Nagios-users] Web interface authentication
> >
> >
> >
> > Jim,
> >
> > I did configure 'guest' access. But Nagios still requires,
> > that I authenticate
> > using 'guest'. The browser asks for a userid anyway and
> > accepts guest now.
> >
> > You make it sound like this is not the way it should work,
> > I'll have to
> > check what's wrong with my config in this case.
> >
> > With 'guest' properly confgured the the designated cgi's
> > should no longer
> > require any authentication, if I understand you right ?
> >
> > Markus
> >
> > On Thu, 14 Nov 2002 12:03:14 -0600, Carroll, Jim P [Contractor] wrote:
> >
> > >With 'guest' access, so long as you haven't included 'guest'
> > in any of the
> > >notification groups, then 'guest' can only view on a
> > read-only basis. At
> > >least the way I've configured it (which I derived from the docs).
> > >
> > >jc
> > >
> > >> -----Original Message-----
> > >> From: Markus Baertschi [mailto:markus at markus.org]
> > >> Sent: Thursday, November 14, 2002 10:26 AM
> > >> To: nagios-users at lists.sourceforge.net
> > >> Subject: [Nagios-users] Web interface authentication
> > >>
> > >>
> > >>
> > >> I'd like to allow everybody to see some parts of the web interface
> > >> (Status Overview, Summary, etc) while still requiring
> > authentication
> > >> for the 'active' parts like Scheduling Downtime, etc.
> > >>
> > >> When studying the documentation it looks to me that I can either
> > >> turn authentication off and everybody has full access or une
> > >> authentication, but then it is necessary for all cgi's.
> > >>
> > >> Can you give me a hint how to proceed ?
> > >>
> > >> Markus
> > >>
> > >>
> > >>
> > >> --
> > >> Markus Baertschi Phone: ++41 (21) 807 1677
> > >> Bas du Rossé 14b Fax : ++41 (21) 807 1678
> > >> CH-1163, Etoy Email: markus at markus.org
> > >> Switzerland Homepage: www.markus.org
> > >>
> > >>
> > >>
> > >>
> > >> -------------------------------------------------------
> > >> This sf.net email is sponsored by: To learn the basics of securing
> > >> your web site with SSL, click here to get a FREE TRIAL of a Thawte
> > >> Server Certificate: http://www.gothawte.com/rd524.html
> > >> _______________________________________________
> > >> Nagios-users mailing list
> > >> Nagios-users at lists.sourceforge.net
> > >> https://lists.sourceforge.net/lists/listinfo/nagios-users
> > >>
> > >
> > >
> > >-------------------------------------------------------
> > >This sf.net email is sponsored by: To learn the basics of securing
> > >your web site with SSL, click here to get a FREE TRIAL of a Thawte
> > >Server Certificate: http://www.gothawte.com/rd524.html
> > >_______________________________________________
> > >Nagios-users mailing list
> > >Nagios-users at lists.sourceforge.net
> > >https://lists.sourceforge.net/lists/listinfo/nagios-users
> >
> >
> >
> > --
> > Markus Baertschi Phone: ++41 (21) 807 1677
> > Bas du Rossé 14b Fax : ++41 (21) 807 1678
> > CH-1163, Etoy Email: markus at markus.org
> > Switzerland Homepage: www.markus.org
> >
> >
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by: To learn the basics of securing
> your web site with SSL, click here to get a FREE TRIAL of a Thawte
> Server Certificate: http://www.gothawte.com/rd524.html
> _______________________________________________
> Nagios-users mailing list
> Nagios-users at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nagios-users
--
Karl DeBisschop <karl at debisschop.net>
-------------------------------------------------------
This sf.net email is sponsored by: To learn the basics of securing
your web site with SSL, click here to get a FREE TRIAL of a Thawte
Server Certificate: http://www.gothawte.com/rd524.html
More information about the Users
mailing list