Authntication/NIS

[Allan Clark]

On Tue, Sep 23, 2008 at 13:13, stan <stanb at panix.com> wrote:

> I am trying to get a Nagios installation in production. I have most of the
> first phase of it working as desired, but the final hurdle to getting it
> actually used is setting up authentication for the users.
>
> Now, in a perfect world, I would as soon not have authentication turned on,
> but the contractor i have doing the work tells me that Nagios will not work
> without this. I have a mail machine that all of  my users do have accounts
> on, and I would like to use it as an NIS master to allow the users to
> re-use their existing credentials to access Nagios, and nagvis.
>
> Has anyone gotten this working? Any tips? We seem to be struggling to get
> this working. At present the machine running Nagios will allow users to log
> in to it using their NIS credentials, but we are struggling to get Apache
> to
> understand how to check NIS for this.


We have Nagios authenticating through our LDAP, except that the CGI needs to
have wildcards in its various redundant authorizations so that anyone in the
right LDAP groups who can get through the LDAP isn't then stopped by the guy
who forgot to configure Nagios to let it through (human error, restarting
nagios as well).

Your NIS would be a similar condition: wildcard ACLs in the CGI.

Is there compatibility between
http://httpd.apache.org/docs/2.2/mod/mod_authn_dbm.html and an NIS
Secondary/Slave?  An NIS Secondary would have full maps transferred, and I
thought those were hashed files as transferred as well.  Alternatively,
extract the original text maps as .htpasswd/.htgroup files and winch them
over to Apache.  Yeah, low-tech, not so classy, and you've probably already
considered it.

Allan
-- 
allanc at chickenandporn.com "金鱼" http://linkedin.com/in/goldfish
please, no proprietary attachments (http://tinyurl.com/cbgq)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.monitoring-lists.org/archive/users/attachments/20080923/3362cfc0/attachment.html>
-------------- next part --------------
-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
-------------- next part --------------
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null