Hi
Please let us know what security impact will be there if "Insecure logins" enabled ?
Is internet access a must to have the Nagios license check implemented ?
https://assets.nagios.com/downloads/nag ... -Check.pdf
Please let us know if any alternative to have this check?
Thank you.
Nagios License Check
-
benjaminsmith
- Posts: 5324
- Joined: Wed Aug 22, 2018 4:39 pm
- Location: saint paul
Re: Nagios License Check
Hi,
Unless it's an offline install, the server must have access to the internet to reach out license server (api.nagios.com).
Insecure logins are allowed by passing a user generate a ticket in the URL string for authentication. For this particular check, it's running the URL string against itself, but I would recommend setting up SSL/TLS on the system as well. That said, enabling insure logins is going to be less secure than not.
See:How To Configure SSL/TLS
Let us know if you have any other questions.
-Benjamin
Unless it's an offline install, the server must have access to the internet to reach out license server (api.nagios.com).
Insecure logins are allowed by passing a user generate a ticket in the URL string for authentication. For this particular check, it's running the URL string against itself, but I would recommend setting up SSL/TLS on the system as well. That said, enabling insure logins is going to be less secure than not.
See:How To Configure SSL/TLS
Let us know if you have any other questions.
-Benjamin
As of May 25th, 2018, all communications with Nagios Enterprises and its employees are covered under our new Privacy Policy.
Be sure to check out our Knowledgebase for helpful articles and solutions!
Be sure to check out our Knowledgebase for helpful articles and solutions!