Nagios XI use HTTPS only.....

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
Locked
ITTeam
Posts: 16
Joined: Fri Jul 16, 2010 10:20 pm

Nagios XI use HTTPS only.....

Post by ITTeam »

Anyone know how to make NagiosXi webinterface to force users to use HTTPS, and not HTTP. either a redirect or a "page not found" error is fine.
I changed NagiosXI webinterface under Admin-manage system config- changed the program URL to be HTTPS, and I can now login using HTTPS. But HTTP still works also.
I want to disable that.

Thanks,
Mike
tonyyarusso
Posts: 1128
Joined: Wed Mar 03, 2010 12:38 pm
Location: St. Paul, MN, USA
Contact:

Re: Nagios XI use HTTPS only.....

Post by tonyyarusso »

You can do this with the mod_rewrite Apache module. One example of such a configuration can be found on http://www.besthostratings.com/articles ... ccess.html , with plenty more as results for a Google query of 'apache rewrite https'.
Tony Yarusso
Technical Services
___
TIES
Web: http://ties.k12.mn.us/
abhijeet1
Posts: 4
Joined: Fri Oct 01, 2010 3:35 am

Re: Nagios XI use HTTPS only.....

Post by abhijeet1 »

Hi

When Nagios XI is installed, we get the following configuration files in /etc/httpd/conf.d/

nagiosxi.conf
nagios.conf
nagiosql.conf

these have only the Directory directives

I have the .crt and .key files ( self-generated ones ).

Which of them need to be modified and what modification would be required to the configuration files for Nagios XI to use only HTTPS for the web front end?
mmestnik
Posts: 972
Joined: Mon Feb 15, 2010 2:23 pm

Re: Nagios XI use HTTPS only.....

Post by mmestnik »

That is correct syntax for Directory.

You may be talking about a much larger "How do I get apache to listen on 443 and use SSL." web-server administration question. This can be done using any of the available methods. We don't have the resources to duplicate this knowledge base, please seek assistance from your OS vendor or the CentOS community if using our VM.

One important consideration is to ensure 127.0.0.1:80 and localhost:80 are left unaltered. You should define a new virtual port to house your redirect and redefine the default virtual host to only listen on the loopback interface.

We don't have any instructions on doing this, but we would appreciate any notes you provide.
Locked