Active Directory integration works wonderfully but unfortunately I cannot use it because:
1) The security group at my organization won't allow me to use LDAP integration unless I use LDAPS
2) the windows group wants me use Kerberos authentication rather than LDAPS
3) My uses prefer I integrate with our standard Single Sign-On solution that uses CAS (Central Authentication System) http://www.jasig.org/cas
I have explored the option of using mod_auth_kerb but afaict that does not work with nagiosxi as it uses its own cookie-based authentication scheme
http://wiki.nagios.org/index.php/Windows_Authentication
So my options are:
1) Figure out how to integrate NagiosXI with kerberos, perhaps using the ldap integration component as an example
2) Integrate with CAS, lots more hand-coding on my part
My preferred option is number 2, but it may be much more difficult to implement.
There is a phpCAS library
https://wiki.jasig.org/display/CASC/phpCAS
Dear nagios gods, what is the likelihood of seeing either manner of authentication supported in the near future?
Feature Request: Authentication via CAS
Re: Feature Request: Authentication via CAS
Hello fao,
I sent a more detailed response via email and also added this to our feature request:
http://tracker.nagios.com/view.php?id=141
Thanks!
I sent a more detailed response via email and also added this to our feature request:
http://tracker.nagios.com/view.php?id=141
Thanks!
Re: Feature Request: Authentication via CAS
Rene, I cannot log into your bug tracker nor have I received the e-mail message. Pls send it to my personal acct [email protected], tks
Re: Feature Request: Authentication via CAS
I will resend it as I see it was from a different address, but the same domain.
Re: Feature Request: Authentication via CAS
Also, you will need to sign up to view the tracker here:
http://tracker.nagios.com/signup_page.php
After that you should be able to view the request
http://tracker.nagios.com/signup_page.php
After that you should be able to view the request