Page 1 of 1

Feature Request: Authentication via CAS

Posted: Fri Apr 29, 2011 4:51 am
by fao
Active Directory integration works wonderfully but unfortunately I cannot use it because:
1) The security group at my organization won't allow me to use LDAP integration unless I use LDAPS
2) the windows group wants me use Kerberos authentication rather than LDAPS
3) My uses prefer I integrate with our standard Single Sign-On solution that uses CAS (Central Authentication System) http://www.jasig.org/cas

I have explored the option of using mod_auth_kerb but afaict that does not work with nagiosxi as it uses its own cookie-based authentication scheme
http://wiki.nagios.org/index.php/Windows_Authentication

So my options are:
1) Figure out how to integrate NagiosXI with kerberos, perhaps using the ldap integration component as an example
2) Integrate with CAS, lots more hand-coding on my part

My preferred option is number 2, but it may be much more difficult to implement.

There is a phpCAS library
https://wiki.jasig.org/display/CASC/phpCAS

Dear nagios gods, what is the likelihood of seeing either manner of authentication supported in the near future?

Re: Feature Request: Authentication via CAS

Posted: Fri Apr 29, 2011 9:26 am
by rdedon
Hello fao,
I sent a more detailed response via email and also added this to our feature request:

http://tracker.nagios.com/view.php?id=141

Thanks!

Re: Feature Request: Authentication via CAS

Posted: Mon May 02, 2011 3:29 am
by fao
Rene, I cannot log into your bug tracker nor have I received the e-mail message. Pls send it to my personal acct [email protected], tks

Re: Feature Request: Authentication via CAS

Posted: Mon May 02, 2011 9:22 am
by rdedon
I will resend it as I see it was from a different address, but the same domain.

Re: Feature Request: Authentication via CAS

Posted: Mon May 02, 2011 9:25 am
by rdedon
Also, you will need to sign up to view the tracker here:
http://tracker.nagios.com/signup_page.php

After that you should be able to view the request :-)