Re: [Nagios-users] Schedule Downtime w/o authentication requirement

2006-12-19 Thread Andreas Ericsson
Subin Shakya wrote:
  I want to configure nagios in such a way that it does not require any
 kind of authorization/authentication including 'guest'.  How can I
 do
 that?
 I do not know where to go in Nagios config to make this happen.
 TIA, Symuser
 =0D
 Right now when I select a Host to schedule a downtime I get:
 =0D
 Sorry Dave, I can't let you do that...
 It seems that you have chosen to not use the authentication
 functionality of the CGIs.
 I don't want to be personally responsible for what may happen as a
 result of allowing unauthorized users to issue commands to Nagios,so
 you'll have to disable this safeguard if you are really stubborn and
 want to invite trouble.
 Read the section on CGI authentication in the HTML documentation to
 learn how you can enable authentication and why you should want to.
 

Nagios is more polite than I am. RTFM and do some thinking and you'll 
find the answer.

On a sidenote; I know the answer but I'm not interested in giving it to 
you when you haven't even bothered trying to find it for yourself.

-- 
Andreas Ericsson   [EMAIL PROTECTED]
OP5 AB www.op5.se
Tel: +46 8-230225  Fax: +46 8-230231

-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT  business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null


Re: [Nagios-users] Schedule Downtime w/o authentication requirement

2006-12-19 Thread Subin Shakya

Andreas, Thanks for your advice.  But, FYI, I have done what I could
before I painfully signed up and advertised  my issue on this list. 

By the way, I am novice on Nagios (heck also with Linux) and took me a
while to build the Nagios system which I am extremely proud of.

What do you think? Can you pass your knowledge to me now?

- Subin

-Original Message-
From: Andreas Ericsson [mailto:[EMAIL PROTECTED]
Sent: Tuesday, December 19, 2006 1:27 AM
To: Subin Shakya
Cc: nagios-users@lists.sourceforge.net
Subject: Re: [Nagios-users] Schedule Downtime w/o authentication
requirement

Subin Shakya wrote:
  I want to configure nagios in such a way that it does not require any
 kind of authorization/authentication including 'guest'.  How can I
 do
 that?
 I do not know where to go in Nagios config to make this happen.
 TIA, Symuser
 =0D
 Right now when I select a Host to schedule a downtime I get:
 =0D
 Sorry Dave, I can't let you do that...
 It seems that you have chosen to not use the authentication
 functionality of the CGIs.
 I don't want to be personally responsible for what may happen as a
 result of allowing unauthorized users to issue commands to
Nagios,so
 you'll have to disable this safeguard if you are really stubborn
and
 want to invite trouble.
 Read the section on CGI authentication in the HTML documentation
to
 learn how you can enable authentication and why you should want
to.


Nagios is more polite than I am. RTFM and do some thinking and you'll
find the answer.

On a sidenote; I know the answer but I'm not interested in giving it to
you when you haven't even bothered trying to find it for yourself.

--
Andreas Ericsson   [EMAIL PROTECTED]
OP5 AB www.op5.se
Tel: +46 8-230225  Fax: +46 8-230231

===
Notice: This e-mail message, together with any attachments, contains
information of Symyx Technologies, Inc. or any of its affiliates or
subsidiaries that may be confidential, proprietary, copyrighted,
privileged and/or protected work product, and is meant solely for
the intended recipient. If you are not the intended recipient, and
have received this message in error, please contact the sender
immediately, permanently delete the original and any copies of this
email and any attachments thereto.

-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT  business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null


Re: [Nagios-users] Schedule Downtime w/o authentication requirement

2006-12-19 Thread Mike Holloway

Subin, have a look through cgi.cfg

-mike


On Dec 19, 2006, at 12:30 PM, Subin Shakya wrote:


 Andreas, Thanks for your advice.  But, FYI, I have done what I could
 before I painfully signed up and advertised  my issue on this list.

 By the way, I am novice on Nagios (heck also with Linux) and took me a
 while to build the Nagios system which I am extremely proud of.

 What do you think? Can you pass your knowledge to me now?

 - Subin

 -Original Message-
 From: Andreas Ericsson [mailto:[EMAIL PROTECTED]
 Sent: Tuesday, December 19, 2006 1:27 AM
 To: Subin Shakya
 Cc: nagios-users@lists.sourceforge.net
 Subject: Re: [Nagios-users] Schedule Downtime w/o authentication
 requirement

 Subin Shakya wrote:
  I want to configure nagios in such a way that it does not require  
 any
 kind of authorization/authentication including 'guest'.  How  
 can I
 do
 that?
 I do not know where to go in Nagios config to make this happen.
 TIA, Symuser
 =0D
 Right now when I select a Host to schedule a downtime I get:
 =0D
 Sorry Dave, I can't let you do that...
 It seems that you have chosen to not use the authentication
 functionality of the CGIs.
 I don't want to be personally responsible for what may happen  
 as a
 result of allowing unauthorized users to issue commands to
 Nagios,so
 you'll have to disable this safeguard if you are really stubborn
 and
 want to invite trouble.
 Read the section on CGI authentication in the HTML documentation
 to
 learn how you can enable authentication and why you should want
 to.


 Nagios is more polite than I am. RTFM and do some thinking and you'll
 find the answer.

 On a sidenote; I know the answer but I'm not interested in giving  
 it to
 you when you haven't even bothered trying to find it for yourself.

 --
 Andreas Ericsson   [EMAIL PROTECTED]
 OP5 AB www.op5.se
 Tel: +46 8-230225  Fax: +46 8-230231

 ===
 Notice: This e-mail message, together with any attachments, contains
 information of Symyx Technologies, Inc. or any of its affiliates or
 subsidiaries that may be confidential, proprietary, copyrighted,
 privileged and/or protected work product, and is meant solely for
 the intended recipient. If you are not the intended recipient, and
 have received this message in error, please contact the sender
 immediately, permanently delete the original and any copies of this
 email and any attachments thereto.

 -- 
 ---
 Take Surveys. Earn Cash. Influence the Future of IT
 Join SourceForge.net's Techsay panel and you'll get the chance to  
 share your
 opinions on IT  business topics through brief surveys - and earn cash
 http://www.techsay.com/default.php? 
 page=join.phpp=sourceforgeCID=DEVDEV
 ___
 Nagios-users mailing list
 Nagios-users@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/nagios-users
 ::: Please include Nagios version, plugin version (-v) and OS when  
 reporting any issue.
 ::: Messages without supporting info will risk being sent to /dev/null

-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT  business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null


Re: [Nagios-users] Schedule Downtime w/o authentication requirement

2006-12-19 Thread frank
No, you didn't.

The last link under Configuring Nagios in the documentation table of 
contents clearly says Configuring authorization for the CGIs. Read it!

http://nagios.sourceforge.net/docs/2_0/cgiauth.html

Authentication On Secured Web Servers

If your web server is located in a secure domain (i.e., behind a firewall) 
or if you are using SSL, you can define a default username that can be 
used to access the CGIs. This is done by defining the default_user_name 
option in the CGI configuration file. By defining a default username that 
can access the CGIs, you can allow users to access the CGIs without 
necessarily having to authenticate to the web server.. You may want to use 
this to avoid having to use basic web authentication, as basic 
authentication transmits passwords in clear text over the Internet.

Important: Do not define a default username unless you are running a 
secure web server and are sure that everyone who has access to the CGIs 
has been authenticated in some manner! If you define this variable, anyone 
who has not authenticated to the web server will inherit all rights you 
assign to this user!


-f

On Tue, 19 Dec 2006, Subin Shakya wrote:

 Date: Tue, 19 Dec 2006 10:30:06 -0800
 From: Subin Shakya [EMAIL PROTECTED]
 To: Andreas Ericsson [EMAIL PROTECTED]
 Cc: nagios-users@lists.sourceforge.net
 Subject: Re: [Nagios-users] Schedule Downtime w/o authentication requirement
 

 Andreas, Thanks for your advice.  But, FYI, I have done what I could
 before I painfully signed up and advertised  my issue on this list.

 By the way, I am novice on Nagios (heck also with Linux) and took me a
 while to build the Nagios system which I am extremely proud of.

 What do you think? Can you pass your knowledge to me now?

 - Subin

 -Original Message-
 From: Andreas Ericsson [mailto:[EMAIL PROTECTED]
 Sent: Tuesday, December 19, 2006 1:27 AM
 To: Subin Shakya
 Cc: nagios-users@lists.sourceforge.net
 Subject: Re: [Nagios-users] Schedule Downtime w/o authentication
 requirement

 Subin Shakya wrote:
  I want to configure nagios in such a way that it does not require any
 kind of authorization/authentication including 'guest'.  How can I
 do
 that?
 I do not know where to go in Nagios config to make this happen.
 TIA, Symuser
 =0D
 Right now when I select a Host to schedule a downtime I get:
 =0D
 Sorry Dave, I can't let you do that...
 It seems that you have chosen to not use the authentication
 functionality of the CGIs.
 I don't want to be personally responsible for what may happen as a
 result of allowing unauthorized users to issue commands to
 Nagios,so
 you'll have to disable this safeguard if you are really stubborn
 and
 want to invite trouble.
 Read the section on CGI authentication in the HTML documentation
 to
 learn how you can enable authentication and why you should want
 to.


 Nagios is more polite than I am. RTFM and do some thinking and you'll
 find the answer.

 On a sidenote; I know the answer but I'm not interested in giving it to
 you when you haven't even bothered trying to find it for yourself.

 --
 Andreas Ericsson   [EMAIL PROTECTED]
 OP5 AB www.op5.se
 Tel: +46 8-230225  Fax: +46 8-230231

 ===
 Notice: This e-mail message, together with any attachments, contains
 information of Symyx Technologies, Inc. or any of its affiliates or
 subsidiaries that may be confidential, proprietary, copyrighted,
 privileged and/or protected work product, and is meant solely for
 the intended recipient. If you are not the intended recipient, and
 have received this message in error, please contact the sender
 immediately, permanently delete the original and any copies of this
 email and any attachments thereto.

 -
 Take Surveys. Earn Cash. Influence the Future of IT
 Join SourceForge.net's Techsay panel and you'll get the chance to share your
 opinions on IT  business topics through brief surveys - and earn cash
 http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV
 ___
 Nagios-users mailing list
 Nagios-users@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/nagios-users
 ::: Please include Nagios version, plugin version (-v) and OS when reporting 
 any issue.
 ::: Messages without supporting info will risk being sent to /dev/null


-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT  business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https

[Nagios-users] Schedule Downtime w/o authentication requirement

2006-12-18 Thread Subin Shakya

 I want to configure nagios in such a way that it does not require any
kind of authorization/authentication including 'guest'.  How can I
do
that?
I do not know where to go in Nagios config to make this happen.
TIA, Symuser
=0D
Right now when I select a Host to schedule a downtime I get:
=0D
Sorry Dave, I can't let you do that...
It seems that you have chosen to not use the authentication
functionality of the CGIs.
I don't want to be personally responsible for what may happen as a
result of allowing unauthorized users to issue commands to Nagios,so
you'll have to disable this safeguard if you are really stubborn and
want to invite trouble.
Read the section on CGI authentication in the HTML documentation to
learn how you can enable authentication and why you should want to.


===
Notice: This e-mail message, together with any attachments, contains
information of Symyx Technologies, Inc. or any of its affiliates or
subsidiaries that may be confidential, proprietary, copyrighted,
privileged and/or protected work product, and is meant solely for
the intended recipient. If you are not the intended recipient, and
have received this message in error, please contact the sender
immediately, permanently delete the original and any copies of this
email and any attachments thereto.

-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT  business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null


Re: [Nagios-users] Schedule Downtime w/o authentication requirement

2006-12-18 Thread Patrick Morris
On Mon, 18 Dec 2006, Subin Shakya wrote:

 
  I want to configure nagios in such a way that it does not require any
 kind of authorization/authentication including 'guest'.  How can I
 do
 that?

Strictly speaking, you can't.

Set up a guest account with full access, do not set up authentication on
your webserver, and it should work the way you want.

-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT  business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null


Re: [Nagios-users] Schedule Downtime w/o authentication requirement

2006-12-18 Thread Marc Powell


 -Original Message-
 From: [EMAIL PROTECTED] [mailto:nagios-users-
 [EMAIL PROTECTED] On Behalf Of Patrick Morris
 Sent: Monday, December 18, 2006 3:19 PM
 To: Subin Shakya
 Cc: nagios-users@lists.sourceforge.net
 Subject: Re: [Nagios-users] Schedule Downtime w/o authentication
 requirement
 
 On Mon, 18 Dec 2006, Subin Shakya wrote:
 
 
   I want to configure nagios in such a way that it does not require
any
  kind of authorization/authentication including 'guest'.  How can
I
  do
  that?
 
 Strictly speaking, you can't.

Sure you can. See the default_user_name and authorized_for_* variables
and descriptions in cgi.cfg.

--
Marc

-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT  business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null


Re: [Nagios-users] Schedule Downtime w/o authentication requirement

2006-12-18 Thread Patrick Morris
On Mon, 18 Dec 2006, Marc Powell wrote:

I want to configure nagios in such a way that it does not require
 any
   kind of authorization/authentication including 'guest'.  How can
 I
   do
   that?
  
  Strictly speaking, you can't.
 
 Sure you can. See the default_user_name and authorized_for_* variables
 and descriptions in cgi.cfg.

I think we were both saying the same thing, though your detail and
accuracy was far better than mine. :)

My point was that you need to provide a username to Nagios one way or
another; it can't be eliminated entirely.  It could be called guest,
or anything else, but you need a default user to keep Nagios happy.

-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT  business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null


Re: [Nagios-users] Schedule Downtime w/o authentication requirement

2006-12-18 Thread Marc Powell

 -Original Message-
 From: Subin Shakya [mailto:[EMAIL PROTECTED]
 Sent: Monday, December 18, 2006 5:08 PM
 To: Marc Powell; [EMAIL PROTECTED]
 Subject: RE: [Nagios-users] Schedule Downtime w/o authentication
 requirement
 
 
 Patrick and Mark,
 
 I added guest to all the authorized_for_* lines and the
 default_user_name is guest.  But I got the same results.  Do I need to
 do anything else like restarting apache, etc? 

Please always respond on list so that others may benefit from your
experience in the future.

No, you don't need to restart apache. Make sure you have
use_authentication=1 in cgi.cfg. Do not create a .htaccess file or
enable htaccess in httpd.conf for the Nagios directories. Nagios will
not be able to determine the REMOTE_USER environment variable and will
instead use the default_user_name.

--
Marc

-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT  business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null