We currently bind the ui to local host only. The front the service with Apache and ldap authentication and proxy the requests to the ui service from apache. This works really well for us and allows us to leverage out corporate active directory store and ad groups for authorization.
Sent from my iPhone On Aug 13, 2014, at 5:46 PM, "rick.c.ran...@kp.org" <rick.c.ran...@kp.org> wrote: We would like to secure the storm GUI web page. I was wondering if anyone has found a way to view the Storm GUI only after some type of authentication. Rick Rankin