[Nagios-devel] Re: [Nagios-users] Re: How to Loggout?

Support forum for Nagios Core, Nagios Plugins, NCPA, NRPE, NSCA, NDOUtils and more. Engage with the community of users including those using the open source solutions.
Locked
Guest

[Nagios-devel] Re: [Nagios-users] Re: How to Loggout?

Post by Guest »

Devel Team,

are you all thinking about a solutinon to this problema?

I realy think it's a very important feature that nagios lacks. Why cannot=
=20
Nagios handle the autentication by it self?=20

We could also have an admin interface to let the contacts change their
passwords. I don't think that the it would be a security hole (.htaccess=20
is also very unsafe).

I hope it could be in Nagios 2.0.


On Fri, 4 Jun 2004, Paul L. Allen wrote:

> Jason Martin writes:=20
>=20
> > It is actually a problem with the HTTP Spec
>=20
> Not really. The spec provides a simple means of authenticating yourself.
> In many cases it is reasonable to assume that you will want to keep on
> authenticating yourself. In some situations you need to be able to logou=
t,
> and then it is up to the website to use a different means of authenticati=
on.=20
>=20
> Yahoo, Hotmail and many other sites all use a different means of
> authentication so people can logout, because these are services that are
> often accessed from internet cafes or library internet terminals. Most
> people who use Nagios have little need to be able to logout, so it was
> reasonable for Ethan to use the HTTP authentiaction mechanism.=20
>=20
> > once a password is provided for a security realm, there isn't a way to
> > get the server to 'forget' it.
>=20
> It is the browser that remembers the credentials, not the server. You
> may be able to fiddle it with a sub-directory which has a .htaccess
> defining the same realm but pointing to an empty password file. Going
> to a page there may cause the browser to put up another login box, which
> will fail, then the password is forgotten. Clumsy, but not as clumsy as
> restarting your browser.=20
>=20
> --=20
> Paul Allen
> Softflare Support=20
>=20
>=20
>=20
>=20
> -------------------------------------------------------
> This SF.Net email is sponsored by the new InstallShield X.
> >From Windows to Linux, servers to mobile, InstallShield X is the one
> installation-authoring solution that does it all. Learn more and
> evaluate today! http://www.installshield.com/Dev2Dev/0504
> _______________________________________________
> Nagios-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/lis ... gios-users
> ::: Please include Nagios version, plugin version (-v) and OS when report=
ing any issue.=20
> ::: Messages without supporting info will risk being sent to /dev/null
>=20

--=20
Leonardo Henrique Machado
=DAltimo Per=EDodo em Ci=EAncia da Computacao
Universidade Federal de Minas Gerais





This post was automatically imported from historical nagios-devel mailing list archives
Original poster: [email protected]
Locked