Using nagios check_http forwebbasedauthentication

Marouane HIMDI marouane.himdi at kereval.com
Fri Jan 23 15:46:50 CET 2009


I'll recommand the same tool webinject as Narendran. I have played with it.
Good to generate http/https request and calculate response time and verify
some words in reponse request.

Best regards

Dr Marouane HIMDI
Ingénieur R&D/R&D Engineer
 

KEREVAL
4, rue Hélène Boucher
Z.A. Bellevue
35235 Thorigné Fouillard 
Tel : +33 (0)2 23 20 36 64
http://www.kereval.com
 
P Pensez à l'environnement : n'imprimez ce message et ses pièces jointes que
si nécessaire !
-----Message d'origine-----
De : narendran.neelamegam at wipro.com [mailto:narendran.neelamegam at wipro.com] 
Envoyé : vendredi 23 janvier 2009 15:26
À : nagios-users at lists.sourceforge.net
Objet : Re: [Nagios-users] Using nagios check_http forwebbasedauthentication


You may also try http://www.webinject.org/plugin.html

Regards,
Naren

-----Original Message-----
From: Marc Powell [mailto:marc at ena.com] 
Sent: Thursday, January 22, 2009 8:46 PM
To: nagios-users at lists.sourceforge.net
Subject: Re: [Nagios-users] Using nagios check_http for
webbasedauthentication


On Jan 22, 2009, at 7:55 AM, Venugopal S wrote:

>
> Hi Marc,
>
> Thanks for the reply. I am even now vague about how to proceed.
>
> Let me tell you the need :
>
> I have to open http://ww12.1800flowers.com/signin.do and enter my
> email(svenugopaal at gmail.com) and password("podhum") in order to login.

Looking at the source of the page, the sign-in form has the following  
pertinent fields --

	<input type="text" name="email" maxlength="100" value=""
style="width: 
120px" class="textfield">
	<input type="password" name="password" maxlength="64" value=""  
style="width:120px" class="textfield">
									
The field names that would be passed as the POST are 'email' and  
'password'. Now, I don't know what command{} definitions you have for  
check_http or how they're configured so I'll show you how to create a  
new one very specific to this test --

define command {
	command_name 		check_flowers_login
	command_line		$USER1$/check_http -I $HOSTADDRESS$ -H  
ww12.1800flowers.com -u /signin.do -P  
"email=svenugopaal at gmail.com&password=podhum"
}

Set that as the check_command for a service associated with the host  
and nagios will verify that the web server does not return an HTTP  
error after login. Note that if your server returns a standard 200  
response indicating OK even if there is a login error (most likely),  
you'll want to identify a word or string of text that should appear in  
the page after successful login, but not for a failure, and look for  
that with the -s parameter --

define command {
	command_name 		check_flowers_login
	command_line		$USER1$/check_http -I $HOSTADDRESS$ -H  
ww12.1800flowers.com -u /signin.do -P  
"email=svenugopaal at gmail.com&password=podhum" -s "you are logged in"
}

> Though this looks like a lot of hand holding, I have no other go.

My charge is 1 local specialty beer for all Hand Holding Help.

--
Marc


------------------------------------------------------------------------
------
This SF.net email is sponsored by:
SourcForge Community
SourceForge wants to tell your story.
http://p.sf.net/sfu/sf-spreadtheword
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when
reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null

----------------------------------------------------------------------------
--
This SF.net email is sponsored by:
SourcForge Community
SourceForge wants to tell your story.
http://p.sf.net/sfu/sf-spreadtheword
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting
any issue. 
::: Messages without supporting info will risk being sent to /dev/null


------------------------------------------------------------------------------
This SF.net email is sponsored by:
SourcForge Community
SourceForge wants to tell your story.
http://p.sf.net/sfu/sf-spreadtheword
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null





More information about the Users mailing list