Nagios4
De Linuxmemo.
(Différences entre les versions)
(→Authentification) |
(→Authentification) |
||
Ligne 7 : | Ligne 7 : | ||
# apache configuration for nagios 4.x | # apache configuration for nagios 4.x | ||
- | + | ScriptAlias /cgi-bin/nagios4 /usr/lib/cgi-bin/nagios4 | |
- | ScriptAlias /cgi-bin/nagios4 /usr/lib/cgi-bin/nagios4 | + | ScriptAlias /nagios4/cgi-bin /usr/lib/cgi-bin/nagios4 |
- | ScriptAlias /nagios4/cgi-bin /usr/lib/cgi-bin/nagios4 | + | # Where the stylesheets (config files) reside |
- | + | Alias /nagios4/stylesheets /etc/nagios4/stylesheets | |
- | # Where the stylesheets (config files) reside | + | # Where the HTML pages live |
- | Alias /nagios4/stylesheets /etc/nagios4/stylesheets | + | Alias /nagios4 /usr/share/nagios4/htdocs |
- | + | ||
- | # Where the HTML pages live | + | |
- | Alias /nagios4 /usr/share/nagios4/htdocs | + | |
- | + | ||
- | + | ||
<DirectoryMatch (/usr/share/nagios4/htdocs|/usr/lib/cgi-bin/nagios4|/etc/nagios4/stylesheets)> | <DirectoryMatch (/usr/share/nagios4/htdocs|/usr/lib/cgi-bin/nagios4|/etc/nagios4/stylesheets)> | ||
Options FollowSymLinks | Options FollowSymLinks | ||
DirectoryIndex index.php index.html | DirectoryIndex index.php index.html | ||
AllowOverride AuthConfig | AllowOverride AuthConfig | ||
- | |||
AuthDigestDomain "Nagios4" | AuthDigestDomain "Nagios4" | ||
AuthDigestProvider file | AuthDigestProvider file | ||
Ligne 31 : | Ligne 25 : | ||
#Require all granted | #Require all granted | ||
Require valid-user | Require valid-user | ||
- | |||
# | # | ||
# The default Debian nagios4 install sets use_authentication=0 in | # The default Debian nagios4 install sets use_authentication=0 in | ||
Ligne 51 : | Ligne 44 : | ||
# within the nagios configuration. | # within the nagios configuration. | ||
# | # | ||
- | |||
#Require ip ::1/128 fc00::/7 fe80::/10 10.0.0.0/8 127.0.0.0/8 169.254.0.0/16 172.16.0.0/12 192.168.0.0/16 | #Require ip ::1/128 fc00::/7 fe80::/10 10.0.0.0/8 127.0.0.0/8 169.254.0.0/16 172.16.0.0/12 192.168.0.0/16 | ||
#<Files "cmd.cgi"> | #<Files "cmd.cgi"> | ||
Ligne 64 : | Ligne 56 : | ||
#</Files> | #</Files> | ||
</DirectoryMatch> | </DirectoryMatch> | ||
- | |||
<Directory /usr/share/nagios4/htdocs> | <Directory /usr/share/nagios4/htdocs> | ||
Options +ExecCGI | Options +ExecCGI | ||
</Directory> | </Directory> |
Version actuelle en date du 24 août 2023 à 10:01
[modifier] Authentification
htdigest -c /etc/nagios4/htdigest.users Nagios4 nagiosadmin
cd /etc/apache2/conf-available/ vim nagios4-cgi.conf
# apache configuration for nagios 4.x ScriptAlias /cgi-bin/nagios4 /usr/lib/cgi-bin/nagios4 ScriptAlias /nagios4/cgi-bin /usr/lib/cgi-bin/nagios4 # Where the stylesheets (config files) reside Alias /nagios4/stylesheets /etc/nagios4/stylesheets # Where the HTML pages live Alias /nagios4 /usr/share/nagios4/htdocs <DirectoryMatch (/usr/share/nagios4/htdocs|/usr/lib/cgi-bin/nagios4|/etc/nagios4/stylesheets)> Options FollowSymLinks DirectoryIndex index.php index.html AllowOverride AuthConfig AuthDigestDomain "Nagios4" AuthDigestProvider file AuthUserFile "/etc/nagios4/htdigest.users" AuthGroupFile "/etc/group" AuthName "Nagios4" AuthType Digest #Require all granted Require valid-user # # The default Debian nagios4 install sets use_authentication=0 in # /etc/nagios4/cgi.cfg, which turns off nagos's internal authentication. # This is insecure. As a compromise this default apache2 configuration # only allows private IP addresses access. # # The <Files>...</Files> below shows how you can secure the nagios4 # web site so anybody can view it, but only authenticated users can issue # commands (such as silence notifications). To do that replace the # "Require all granted" with "Require valid-user", and use htdigest # program from the apache2-utils package to add users to # /etc/nagios4/htdigest.users. # # A step up is to insist all users validate themselves by moving # the stanza's in the <Files>..<Files> into the <DirectoryMatch>. # Then by setting use_authentication=1 in /etc/nagios4/cgi.cfg you # can configure which people get to see a particular service from # within the nagios configuration. # #Require ip ::1/128 fc00::/7 fe80::/10 10.0.0.0/8 127.0.0.0/8 169.254.0.0/16 172.16.0.0/12 192.168.0.0/16 #<Files "cmd.cgi"> #AuthDigestDomain "Nagios4" #AuthDigestProvider file #AuthUserFile "/etc/nagios4/htdigest.users" #AuthGroupFile "/etc/group" #AuthName "Nagios4" #AuthType Digest #Require all granted #Require valid-user #</Files> </DirectoryMatch> <Directory /usr/share/nagios4/htdocs> Options +ExecCGI </Directory>