Problem with use_authentication=0

[Atle Veka]

Well, looks like I finally found my answer:

[http://nagios.sourceforge.net/docs/1_0/cgis.html#cmd_cgi]
"If you have chosen not to use authentication with the CGIs, this CGI will
not allow anyone to issue commands to Nagios. This is done for your own
protection. I would suggest removing this CGI altogether if you decide not
to use authentication with the CGIs."

Sucks for me since the SSL proxy already does authentication and I don't
want our employees to have to enter two passwords to access Nagios. I'll
have to figure out something else. :/


Regards,

Atle

On Mon, 26 Jul 2004, Atle Veka wrote:

>
> Hello,
>
> We have an SSL proxy server that sits in front of all of our internal
> tools, including Nagios. You can view all status pages but not execute any
> commands. Is this not possible without modifying the sourcecode and
> recompiling or associating user 'guest' to all the hosts? If I have missed
> anything in the documentation, please let me know. :)
>
>
> Here's the relevant info from cgi.cfg:
>
> use_authentication=0
> default_user_name=guest
> authorized_for_system_information=guest
> authorized_for_configuration_information=guest
> authorized_for_system_commands=guest
> authorized_for_all_services=guest
> authorized_for_all_hosts=guest
> authorized_for_all_service_commands=guest
> authorized_for_all_host_commands=guest
>
>
> Regards,
>
> Atle
> -
> Flying Crocodile Inc, Junior Unix Systems Administrator
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by BEA Weblogic Workshop
> FREE Java Enterprise J2EE developer tools!
> Get your free copy of BEA WebLogic Workshop 8.1 today.
> http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click
> _______________________________________________
> Nagios-users mailing list
> Nagios-users at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nagios-users
> ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue.
> ::: Messages without supporting info will risk being sent to /dev/null
>


-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null