<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1141" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>Yes, it is possible to monitor a web server with
digest authentication (it sounds like that's what you're talking about).
</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>You will need to write your own "plugin" to do
it, but it shouldn't be hard if you have some basic knowledge of shell scripting
and a little patience. Last I checked most web-browsers do not even
support digest authentication and I don't personally know of any monitoring
programs that do either.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Read the RFC for all the details. RFC2617 --
HTTP Authentication</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Here's a summary:</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Client sends a GET for a particular document,
/dir/index.html</FONT></DIV>
<DIV><FONT face=Arial size=2>The server responds with (the
challenge):</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV> HTTP/1.1 401
Unauthorized<BR>
WWW-Authenticate:
Digest<BR>
realm="testrealm@host.com",<BR>
qop="auth,auth-int",<BR>
nonce="dcd98b7102dd2f0e8b11d0f600bfb0c093",<BR>
opaque="5ccc069c403ebaf9f0171e9517f40e41"<BR></DIV>
<DIV><FONT face=Arial size=2>The client then replies with this (the
response):</FONT></DIV>
<DIV>Authorization: Digest
username="Mufasa",<BR>
realm="testrealm@host.com",<BR>
nonce="dcd98b7102dd2f0e8b11d0f600bfb0c093",<BR>
uri="/dir/index.html",<BR>
qop=auth,<BR>
nc=00000001,<BR>
cnonce="0a4f113b",<BR>
response="6629fae49393a05397450978507c4ef1",<BR>
opaque="5ccc069c403ebaf9f0171e9517f40e41"<BR><BR><FONT face=Arial size=2>Notice
the "nonce" and "opaque" are taken from the server's challenge... you don't need
to compute those. You must calculate and provide a cnonce value (see RFC)
and response (your md5 password hash).</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>You can use 'md5' to compute the password
hash. F</FONT><FONT face=Arial size=2>or example:</FONT></DIV>
<DIV><FONT face=Arial size=2># echo "mypassword" | md5</FONT></DIV>
<DIV><FONT face=Arial size=2>d84c7934a7a786d26da3d34d5f7c6c86</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Looks pretty simple to me...... famous last words,
I know. ;-)</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>
<DIV><FONT face=Arial size=2>I do not have a script that does it, or I'd just
give it to you. I would like to see something like this available as a
plugin, so let me know if you need any help with it. The right way to do
it would be to add the functionality to check_http, but I don't know C that
well, so I just use existing programs and shell scripts to do custom stuff like
this.</FONT></DIV></FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>~Mike.</FONT></DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=sakrafd@yahoo.com href="mailto:sakrafd@yahoo.com">sakrafd</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A
title=nagios-users@lists.sourceforge.net
href="mailto:nagios-users@lists.sourceforge.net">nagios-users@lists.sourceforge.net</A>
</DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Friday, April 18, 2003 5:45
AM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> [Nagios-users] web application
monitoring - windows authentication</DIV>
<DIV><FONT face=Arial size=2></FONT><FONT face=Arial size=2></FONT><FONT
face=Arial size=2></FONT><FONT face=Arial size=2></FONT><FONT face=Arial
size=2></FONT><FONT face=Arial size=2></FONT><FONT face=Arial
size=2></FONT><BR></DIV><FONT size=2>
<P>Hi,</P>
<P>I am trying to set up nagios to monitor a web application that is located
in a different windows domain on an intranet. The IIS5 server the application
runs on does not allow anonymous or basic authentication access - all users
have do have specific ACL's to view the site (a windows challenge/response
prompt pops up in IE when first attempting to hit the app). Is it possible to
monitor this type of application with nagios? If so, how? If not, does anyone
know of a free monitoring tool that will?</P>
<P>Thanks in advance,</P>
<P>Dave</P></FONT>
<DIV></DIV>
<P><BR>
<HR SIZE=1>
Do you Yahoo!?<BR><A
href="http://us.rd.yahoo.com/search/mailsig/*http://search.yahoo.com">The New
Yahoo! Search</A> - Faster. Easier. Bingo.</BLOCKQUOTE></BODY></HTML>