Groundwork Support Forum

[Guest]

First off-- Groundwork team, kudos! Keep up the good work.

I just got Groundwork Monitor OS running on a fresh install of SLES9 using the GW packed Apache. In the Administrator Guide, Section 2, Chapter 5 when I browse to http://localhost/nagios/ I get the Groundwork Monitor page instead of the Nagios page. I'm guessing I need to edit an Apache .conf but where and what lines?

Hopefully I can get this running as a Proof of Concept for my CIO to buy into the Pro version.

r/Perry

[Peter_Loh]

Hi Perry,
Actually what you've encountered is a feature of GroundWork Monitor. Don't worry, I'll let you know how to disable this later. We've implemented a capability we called Single Sign On (SSO). The idea is that user access to any systems management application can be controlled centrally through our portal (based on the Guava open source project). We have set up Nagios so that direct access to the URL is unauthorized.

If you want to see how Nagios can be accessed within our portal, we can set up the operator group so you can open the Nagios status, reports and map pages.
- Log in to GroundWork Monitor with user/password admin/admin.
- Select the Administration tab, then select Users menu option.
- Select Roles, Operators
- On the right panel, in the Add View To This Role drop down, select Nagios, then hit the Add View button.
- Repeat for views Map and Nagios Reports.
- Log out of admin, then log in as joe/joe.
You should see the Nagios, Nagios Reports and Map as tabs. These will allow you to access the Nagios pages. You can add any web page access as a tab and have access controlled with this admin page.

If you prefer to access Nagios directly, you can disable SSO in the apache httpd.conf file (/usr/local/groundwork/apache2/conf/httpd.conf). Comment or delete the SSO lines and uncomment the standard lines for ScriptAlias /nagios/cgi-bin and Alias /nagios. These lines should look like the following.

ScriptAlias /nagios/cgi-bin "/usr/local/groundwork/apache2/cgi-bin/nagios"
<Directory "/usr/local/groundwork/apache2/cgi-bin/nagios">
# Uncomment for Guava Single Sign On
#AuthType Basic
#require valid-user
# The followin line should be change to specify the default page for invalid access attempts to this directory
#TKTAuthLoginURL http://localhost/monitor/login.php
#TKTAuthCookieName nagios_auth_tkt
# Uncomment to disable Guava Single Sign On
AllowOverride AuthConfig
Options ExecCGI
Order allow,deny
Allow from all
PassEnv LD_LIBRARY_PATH
</Directory>
Alias /nagios "/usr/local/groundwork/nagios/share"
<Directory "/usr/local/groundwork/nagios/share">
# Uncomment for Guava Single Sign On
#AuthType Basic
#require valid-user
# The followin line should be change to specify the default page for invalid access attempts to this directory
#TKTAuthLoginURL http://localhost/monitor/login.php
#TKTAuthCookieName nagios_auth_tkt
# Uncomment to disable Guava Single Sign On
Options None
AllowOverride AuthConfig
Order allow,deny
Allow from all
</Directory>

Restart http with the commands:
/etc/init.d/gwhttpd stop
/etc/init.d/gwhttpd start

You should now be able to access using the <hostname>/nagios URL with the standard Nagios htaccess id/password nagiosadmin/nagiosadmin.
If you have any problems, send me an email ([email protected]) and I will send you an httpd.conf file that should work. Let us know if there's anything else we can do to help.

Peter

[tdondich]

We would definately love to hear feedback in regards to this single sign-on feature. If you feel that it's cumbersome or that it can be easier to administer, let us know!

Taylor
_________________
Project Maintainer for Guava, Status Viewer and Fruity at Groundwork Open Source.