On 07.08.2013 22:45, Schmiechen, Sarah wrote:
> Hello,
>
> I've implemented LDAP password authentication for my icinga-web 
> instance, and want to force communication with SSL. I tried following 
> the instructions here:
>
> http://docs.icinga.org/latest/en/cgisecurity.html

that's more or less the documentation for the classic ui (cgis).

there's 2 locations for ssl

- the apache configuration for the virtualhost / directory requiring ssl
- auth provider in icinga web talking ldaps

if the first works well with the mentioned documentation, it's fine (but 
one might open a docs issue to add that to icinga web configuration - or 
create a wiki page in the howto space by yourself and help others.

>
> About adding SSLRequreSSL, and that worked fine, but I also want to 
> redirect from http to https, and from what I understand, I need to 
> turn back off SSLRequireSSL and use a RewriteRule instead – has anyone 
> done this? Or used a different approach? There are a couple of 
> RewriteRules already in icinga-web.conf and I'm not sure how a new 
> rule will interact – my attempts so far have been fruitless.

Depends how deep you wanna dig - require ssl on all websites served by 
apache, or just icinga web?

Either way, you might find that blog article interesting then: 
http://mbrownnyc.wordpress.com/technology-solutions/reliability-monitoring-solution/implement-icinga-on-centos6-with-selinux/

kind regards,
michael

-- 
DI (FH) Michael Friedrich

mail:     [email protected]
twitter:  https://twitter.com/dnsmichi
jabber:   [email protected]
irc:      irc.freenode.net/icinga dnsmichi

icinga open source monitoring
position: lead core developer
url:      https://www.icinga.org


------------------------------------------------------------------------------
Get 100% visibility into Java/.NET code with AppDynamics Lite!
It's a free troubleshooting tool designed for production.
Get down to code-level detail for bottlenecks, with <2% overhead. 
Download for free and get started troubleshooting in minutes. 
http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clktrk
_______________________________________________
icinga-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/icinga-users

Reply via email to