Nagios & Apache Configuration

[Russell Adams]

Howdy Karl! ;]

Actually, I asked the list as a last resort. I later found out why the
config changes I made weren't taken, some of the specialized configs
that came with gentoo were overriding my settings, and one of my file
includes was commented out by an unintentional RCS revert to a prior
version.

My mistake, I overlooked it. It certainly explains why nothing seemed
to be working for me, though everyone was saying the same thing.

I've gotten everything working the way I want now based on one of the
previous posts and the Apache manual. ;]

Thanks anyway.

Russell

On Tue, Sep 02, 2003 at 07:56:35PM -0400, Karl DeBisschop wrote:
> On Tue, 2003-09-02 at 11:52, Russell Adams wrote:
> > The next question would be how to do that with SSL. ;]
> > 
> > My standard http://server/nagios/ is SSL'd and requires a secure
> > login.
> 
> Forgive my bluntness, but RTFM. As apache configs go, this is not that
> hard. And further, it is not a nagios issue, it is an apache config
> issue.
> 
> I will give you the info anyway, but please take the time to read the
> apache docs.
> 
> > Russell
> > 
> > On Wed, Aug 27, 2003 at 08:51:33PM -0400, Karl DeBisschop wrote:
> 
> > > The following works for me with an unmodified RPM install:
> > > 
> > > ScriptAlias /nagios/cgi-bin/ /usr/lib/nagios/cgi/
> > > Alias /nagios/ /usr/share/nagios/
> > > 
> > > <VirtualHost nnn.nnn.nnn.nnn:80>
> 
> Instead use:
> 
> <VirtualHost nnn.nnn.nnn.nnn:443>
> 
> > >   ServerName nagios.example.com
> > >   ServerAlias nagios
> 
> add:
> 
> SSLRequireSSL
> 
> >  
> > >  <Directory /usr/lib/nagios/cgi/>
> > >     Options ExecCGI
> > >     order deny,allow
> > >     allow from aaa.bbb.ccc.ddd
> > >     AuthType Basic
> > >     AuthUserFile /site/cfg/passwd
> > >     AuthGroupFile /site/cfg/group
> > >     AuthName "user"
> > >     require group user
> > >     Satisfy Any
> > >   </Directory>
> > > 
> > >   <Directory /usr/share/nagios/>
> > >     Options None
> > >     order deny,allow
> > >     allow from aaa.bbb.ccc.ddd
> > >     AuthType Basic
> > >     AuthUserFile /site/cfg/passwd
> > >     AuthGroupFile /site/cfg/group
> > >     AuthName "user"
> > >     require group user
> > >     Satisfy Any
> > >   </Directory>
> > > 
> > > </VirtualHost>
> 
> This assumes you have something like the following in your global
> context:
> 
> Listen 127.0.0.1:443
> Listen ${server_ip}:443
> AddType application/x-x509-ca-cert .crt
> AddType application/x-pkcs7-crl    .crl
> SSLSessionCache         none
> SSLPassPhraseDialog  builtin
> SSLMutex  file:/var/run/ssl_mutex
> SSLRandomSeed startup builtin
> SSLRandomSeed connect builtin
> 
> > > > On Wed, 27 Aug 2003, Russell Adams wrote:
> > > > 
> > > > > I'm trying to configure Apache to allow me to run Nagios on a
> > > > > VirtualHost. Perhaps someone has some input into this process.
> > > > > 
> > > > > I have a webserver, (ie: webserver.mydomain.com), with Nagios
> > > > > currently running on it at http://webserver.mydomain.com/nagios/. I've
> > > > > created a DNS alias for the webserver called nagios.mydomain.com, and
> > > > > am trying to setup a virtual host to have nagios on
> > > > > http://nagios.mydomain.com/.
> > > > > 
> > > > > I have been unsuccessful so far at using url rewriting to redirect
> > > > > queries, and not much luck with trying the direct approach.
> > > > > 
> > > > > My ultimate goal is to have Nagios available on
> > > > > http://webserver.mydomain.com/nagios/ and http://nagios.mydomain.com/.
> > > > > 
> > > > > Any input would be appreciated.
> 
> Hmmmmm... Don't see any mention of SSL here.
> 
> --
> Karl


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null