Feature Request: Authentication via CAS

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
Locked
fao
Posts: 99
Joined: Thu Feb 03, 2011 3:05 am

Feature Request: Authentication via CAS

Post by fao »

Active Directory integration works wonderfully but unfortunately I cannot use it because:
1) The security group at my organization won't allow me to use LDAP integration unless I use LDAPS
2) the windows group wants me use Kerberos authentication rather than LDAPS
3) My uses prefer I integrate with our standard Single Sign-On solution that uses CAS (Central Authentication System) http://www.jasig.org/cas

I have explored the option of using mod_auth_kerb but afaict that does not work with nagiosxi as it uses its own cookie-based authentication scheme
http://wiki.nagios.org/index.php/Windows_Authentication

So my options are:
1) Figure out how to integrate NagiosXI with kerberos, perhaps using the ldap integration component as an example
2) Integrate with CAS, lots more hand-coding on my part

My preferred option is number 2, but it may be much more difficult to implement.

There is a phpCAS library
https://wiki.jasig.org/display/CASC/phpCAS

Dear nagios gods, what is the likelihood of seeing either manner of authentication supported in the near future?
rdedon
Posts: 578
Joined: Sat Nov 20, 2010 4:51 pm

Re: Feature Request: Authentication via CAS

Post by rdedon »

Hello fao,
I sent a more detailed response via email and also added this to our feature request:

http://tracker.nagios.com/view.php?id=141

Thanks!
Rene deDon
Technical Team
___
Nagios Enterprises, LLC
Web: http://www.nagios.com
fao
Posts: 99
Joined: Thu Feb 03, 2011 3:05 am

Re: Feature Request: Authentication via CAS

Post by fao »

Rene, I cannot log into your bug tracker nor have I received the e-mail message. Pls send it to my personal acct [email protected], tks
rdedon
Posts: 578
Joined: Sat Nov 20, 2010 4:51 pm

Re: Feature Request: Authentication via CAS

Post by rdedon »

I will resend it as I see it was from a different address, but the same domain.
Rene deDon
Technical Team
___
Nagios Enterprises, LLC
Web: http://www.nagios.com
rdedon
Posts: 578
Joined: Sat Nov 20, 2010 4:51 pm

Re: Feature Request: Authentication via CAS

Post by rdedon »

Also, you will need to sign up to view the tracker here:
http://tracker.nagios.com/signup_page.php

After that you should be able to view the request :-)
Rene deDon
Technical Team
___
Nagios Enterprises, LLC
Web: http://www.nagios.com
Locked