Advanced authentication

[Patrick Morris]

On Tue, 28 Oct 2008, Allan Clark wrote:

> Hi Dustin;
> 
> Be reminded that if you use this method (and it's what I used) then you need to remember to use a wildcard (*) in your /etc/nagios/cgi.cfg to give all who can see the CGI access via Apache the access to do it.  Otherwise, Apache verifies their user/pass, but the Nagios CGI denies them.

While this may be appropriate in some environments, I wouldn't recommend
it, generally.

It's far better to make sure contact names in the nagios configs match
what the user authenticates with so that Nagios can handle the users'
permissions correctly, rather than giving everyone full access to 
everything.

The authentication method used makes no difference here; this is the
case for any authenticated Nagios configuration.

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null