{"id":1262,"date":"2017-07-28T15:14:27","date_gmt":"2017-07-28T14:14:27","guid":{"rendered":"http:\/\/diablo.craem.net\/?p=1262"},"modified":"2017-07-28T15:14:27","modified_gmt":"2017-07-28T14:14:27","slug":"nagios-openldap-auth-apache-2-4","status":"publish","type":"post","link":"https:\/\/diablo.craem.net\/?p=1262","title":{"rendered":"Nagios + openldap auth + apache 2.4"},"content":{"rendered":"

Esta vez, vamos a integrar la authenticaci\u00f3n de usuarios de nuestro nagios con nuestro openLDAP.
\nPrimero de todo, habilitamos los m\u00f3dulos ldap \/ authnz_ldap
\n
\na2enmod authnz_ldap
\na2enmod ldap
\n<\/code>
\nModificamos el fichero de sites del nagios:
\n
\n#nano \/etc\/apache2\/sites-available\/nagios.conf
\n<\/code>
\nY lo dejamos tal que:
\n
\n# SAMPLE CONFIG SNIPPETS FOR APACHE WEB SERVER
\n#
\n# This file contains examples of entries that need
\n# to be incorporated into your Apache web server
\n# configuration file. Customize the paths, etc. as
\n# needed to fit your system.<\/code>
\n<\/code><\/code>
\nScriptAlias \/nagios\/cgi-bin \u00ab\/usr\/local\/nagios\/sbin\u00bb
\n<\/code><\/code>
\n<directory \u00ab=\u00bb\u00bb usr=\u00bb\u00bb local=\u00bb\u00bb nagios=\u00bb\u00bb sbin\u00bb=\u00bb\u00bb>
\n# SSLRequireSSL
\nOptions ExecCGI
\nAllowOverride None
\n\u00ab<\u00abIfVersion >= 2.3>
\nAuthType Basic
\nRequire all granted
\nAuthName \u00abNagios Access\u00bb
\nAuthLDAPURL \u00abldap:\/\/ldap.miserver.local\/dc=miserver,dc=local?uid?sub?(objectClass=*)\u00bb
\nAuthBasicprovider ldap
\nAuthUserFile \/dev\/null
\nRequire valid-user
\n\u00ab<\u00abIfVersion < 2.3>
\nOrder allow,deny
\nAllow from all
\nAuthType Basic
\nRequire all granted
\nAuthName \u00abNagios Access\u00bb
\nAuthLDAPURL ldap:\/\/ldap.miserver.local\/dc=miserver,dc=local?uid?sub?(objectClass=*)
\nAuthBasicprovider ldap
\nAuthUserFile \/dev\/null
\nRequire valid-user
\n<\/code><\/code>
\n<\/code><\/code>
\nAlias \/nagios \u00ab\/usr\/local\/nagios\/share\u00bb
\n<\/code><\/code>
\n<directory \u00ab=\u00bb\u00bb usr=\u00bb\u00bb local=\u00bb\u00bb nagios=\u00bb\u00bb share\u00bb=\u00bb\u00bb>
\n# SSLRequireSSL
\nOptions None
\nAllowOverride None
\n\u00ab<\u00abIfVersion >= 2.3>
\nAuthType Basic
\nRequire all granted
\nAuthName \u00abNagios Access\u00bb
\nAuthLDAPURL ldap:\/\/ldap.miserver.local\/dc=miserver,dc=local?uid?sub?(objectClass=*)
\nAuthBasicprovider ldap
\nAuthUserFile \/dev\/null
\nRequire valid-user
\n<\/code><\/code>
\n\u00ab<\u00abIfVersion < 2.3>
\nOrder allow,deny
\nAllow from all
\nAuthType Basic
\nRequire all granted
\nAuthName \u00abNagios Access\u00bb
\nAuthLDAPURL ldap:\/\/ldap.miserver.local\/dc=miserver,dc=local?uid?sub?(objectClass=*)
\nAuthBasicprovider ldap
\nAuthUserFile \/dev\/null
\nRequire valid-user
\n
\n<\/code>
\n
\n<\/code>
\nAhora modificamos el nagios para que acepte los usuarios:
\n\/
\n#nano \/usr\/local\/nagios\/etc\/cgi.cfg
\n<\/code>
\nY dejamos las siguientes l\u00ed\u00adneas as\u00ed\u00ad:
\n
\nauthorized_for_system_information=*
\nauthorized_for_configuration_information=*
\nauthorized_for_system_commands=*
\nauthorized_for_all_services=*
\nauthorized_for_all_hosts=*
\nauthorized_for_all_service_commands=*
\nauthorized_for_all_host_commands=*
\n<\/code>
\nReiniciamos apache + nagios y a probar !!!!!!!!<\/p>\n","protected":false},"excerpt":{"rendered":"

Esta vez, vamos a integrar la authenticaci\u00f3n de usuarios de nuestro nagios con nuestro openLDAP. Primero de todo, habilitamos los m\u00f3dulos ldap \/ authnz_ldap a2enmod authnz_ldap a2enmod ldap Modificamos el fichero de sites del nagios: #nano \/etc\/apache2\/sites-available\/nagios.conf Y lo dejamos tal que: # SAMPLE CONFIG SNIPPETS FOR APACHE WEB SERVER # # This file contains […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5,8],"tags":[117,134],"class_list":["post-1262","post","type-post","status-publish","format-standard","hentry","category-linux","category-varios","tag-nagios","tag-openldap"],"_links":{"self":[{"href":"https:\/\/diablo.craem.net\/index.php?rest_route=\/wp\/v2\/posts\/1262","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/diablo.craem.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/diablo.craem.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/diablo.craem.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/diablo.craem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1262"}],"version-history":[{"count":0,"href":"https:\/\/diablo.craem.net\/index.php?rest_route=\/wp\/v2\/posts\/1262\/revisions"}],"wp:attachment":[{"href":"https:\/\/diablo.craem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1262"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/diablo.craem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1262"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/diablo.craem.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1262"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}