Certificate or TPM login

[rseiwert]

I was wondering if there was a way to auto login using a certificate. I do have a read only auto login which works well but the system status only appears for administrators. Whenever the machine that drives the board reboots, say once a month for windows updates, someone has to go log off the auto login and login with administrative credentials so the monitoring engine status shows up.

Also for me everyday multiple times a day I have to log off the read only user and login as administrator. Again if I don't I don't see the monitoring engine status. I would like to be able to trust specific computers to auto login with administrative rights.

[jdalrymple]

Hi rseiwert - it's a bit confusing what you're trying to achieve.

I think the short answer is no - we don't have any advanced authentication mechanisms built in yet. However...

If I'm reading the problem correctly, your problem is that you don't like the auto-login for everyone else? A simple workaround would be to just update your browser favorite to:

http://myXIhost/nagiosxi/login.php?logout

This will bypass the autologin.

[rseiwert]

I like auto login but using a read-only user. This works just fine. I like your suggestion but I find that I skip logging in when forced to do so. I run Nagios as my home page so whenever I go to browse the web I see what's going on. I like that. The real problem I have is the system status doesn't show up for read-only users. Since the NOC displays run auto-logged these do not show.

What I probably need to figure out is how to get the system status to show for the read-only users.

[abrist]

The real problem I have is the system status Image doesn't show up for read-only users. Since the NOC displays run auto-logged these do not show.

What I probably need to figure out is how to get the system status to show for the read-only users.

This is a known limitation of the read only users, but it would be a good feature request. If anything, maybe the devs could create a non-intractable engine status dashlet for read only users. Please open a feature request @ http://tracker.nagios.com.

[rseiwert]

Another issue I was looking to solve with certificate logins was the issue for screens that require core logins fail to function such as network outage.

[abrist]

that require core logins fail

Could you clarify?

[rseiwert]

I would have to create a network outage to test this but in the past I noticed if I was not logged into Core (ie viewing with the read only user) that the Network Outages Dashlet did not work. Same is true with Tactical Overview. As use as I login as an administrator these screens seem to function properly. I'm sure it has something to do with HTTP server authentication but of course I know not what, not being a linux/apache guy but rather a windows/iis guy. I created the user in XI and the user works OK in XI but I'm sure I'm missing a step here.

[abrist]

Odd, read only users are working with those views on my test system. This was tested after a flush of the browser cache and without logging into the core interface, just XI.
Oddly enough, I also get the check marks now . . .

[rseiwert]

I've seen the checks show up on a read only user after being logged in as admin. They do disappear after you close your session by closing your browser. The fact that XI is showing the checks tells me at some level it still thinks you have administrative rights as a read-only user. While I have seen this I was not able to replicate this issue.

[rseiwert]

BTW, I did try to replicate this authorization/session login issue. Here I just logged out as readonly and logged in as nagiosadmin. You can see I'm missing the green checks and the TAC view has invalid data showing the readonly user is logged in. Refreshing changes nothing. Logging out and back in as nagiosadmin and things work normally again. All I'm saying is I've seen the issue were readonly has the green checks and now I've seen the opposite as well.