PKI enabling Nagios XI, Fusion and Log Server

[taandrews]

I have PKI enabled Nagios Core several times in the past. I would like to know the process for pki enabling XI. If the process is the same for Fusion and Log Server, I would like to know that also. I have all pems, and cacert in place. The browser prompts me to accept the cert but I still get the login page. There is a difference between core and xi in this regards.


Thank you!

[rkennedy]

Just to clarify, are you just looking to setup SSL? See these documents for instructions -

Nagios XI -
https://assets.nagios.com/downloads/nag ... s%20XI.pdf

Nagios Log Server -
https://assets.nagios.com/downloads/nag ... Server.pdf

Nagios Network Analyzer -
https://assets.nagios.com/downloads/nag ... alyzer.pdf

[taandrews]

SSL was very simple. Im looking to setup PKI so that there is no manual login. I want to have certs in place and users in the cgi.cfg file who can authenticate. This is very easy on Core but not so much on XI. Unfortunately the docs you provide will not help as I have already SSL enable my XI server.

Thx

[hsmith]

To my knowledge this is not something that's been done. I was unable to find it documented. If you need help with the Nagios side of things we can help you, but we don't have a procedure for this at the time.

[taandrews]

I most certainly need help with this. I am under the gun to get this working at my job. Apparently we have a support contract, I am waiting to get than info so I can call in. Anything that you might have before then will be greatly appreciated. I think I had a minor break through earlier today. I have named changed to ssl.conf, http.conf, and cgi.cfg. I have not made any changes to nagiosxi.conf. The nagiosxi.conf is very similar to nagios.conf. I think I need similar syntax in the nagiosxi file to make this work correctly.

[tmcdonald]

Unfortunately as has been pointed out this is not something we have documented, and I am fairly certain we haven't even tested this in-house. We just don't have any information on the matter to share. It would take a few weeks to lab this up, write documentation, handle troubleshooting, test it, and publish, and while that's certainly something that could be done, it would need to either be done as paid custom development or take a place in the normal workflow.

[taandrews]

Thank you!

[hsmith]

It looks like you submitted a ticket for this issue as well. I'll go ahead and close the post, so we can condense the communication to one location.