Feature Request: Authentication via CAS
Posted: Fri Apr 29, 2011 4:51 am
Active Directory integration works wonderfully but unfortunately I cannot use it because:
1) The security group at my organization won't allow me to use LDAP integration unless I use LDAPS
2) the windows group wants me use Kerberos authentication rather than LDAPS
3) My uses prefer I integrate with our standard Single Sign-On solution that uses CAS (Central Authentication System) http://www.jasig.org/cas
I have explored the option of using mod_auth_kerb but afaict that does not work with nagiosxi as it uses its own cookie-based authentication scheme
http://wiki.nagios.org/index.php/Windows_Authentication
So my options are:
1) Figure out how to integrate NagiosXI with kerberos, perhaps using the ldap integration component as an example
2) Integrate with CAS, lots more hand-coding on my part
My preferred option is number 2, but it may be much more difficult to implement.
There is a phpCAS library
https://wiki.jasig.org/display/CASC/phpCAS
Dear nagios gods, what is the likelihood of seeing either manner of authentication supported in the near future?
1) The security group at my organization won't allow me to use LDAP integration unless I use LDAPS
2) the windows group wants me use Kerberos authentication rather than LDAPS
3) My uses prefer I integrate with our standard Single Sign-On solution that uses CAS (Central Authentication System) http://www.jasig.org/cas
I have explored the option of using mod_auth_kerb but afaict that does not work with nagiosxi as it uses its own cookie-based authentication scheme
http://wiki.nagios.org/index.php/Windows_Authentication
So my options are:
1) Figure out how to integrate NagiosXI with kerberos, perhaps using the ldap integration component as an example
2) Integrate with CAS, lots more hand-coding on my part
My preferred option is number 2, but it may be much more difficult to implement.
There is a phpCAS library
https://wiki.jasig.org/display/CASC/phpCAS
Dear nagios gods, what is the likelihood of seeing either manner of authentication supported in the near future?