このコンテンツは選択した言語では利用できません。
13.5. Nagios Advanced Configuration
13.5.1. Creating Nagios User リンクのコピーリンクがクリップボードにコピーされました!
リンクのコピーリンクがクリップボードにコピーされました!
To create a new Nagios user and set permissions for that user, follow the steps given below:
- Login as
root
user. - Run the command given below with the new user name and type the password when prompted.
htpasswd /etc/nagios/passwd newUserName
# htpasswd /etc/nagios/passwd newUserName
Copy to Clipboard Copied! Toggle word wrap Toggle overflow - Add permissions for the new user in
/etc/nagios/cgi.cfg
file as shown below:Copy to Clipboard Copied! Toggle word wrap Toggle overflow Note
To setread only
permission for users, addauthorized_for_read_only=username
in the/etc/nagios/cgi.cfg
file. - Start Nagios and httpd services using the following commands:
service httpd restart service nagios restart
# service httpd restart # service nagios restart
Copy to Clipboard Copied! Toggle word wrap Toggle overflow - Verify Nagios access by using the following URL in your browser, and using the user name and password.
https://NagiosServer-HostName-or-IPaddress/nagios
https://NagiosServer-HostName-or-IPaddress/nagios
Copy to Clipboard Copied! Toggle word wrap Toggle overflow Figure 13.14. Nagios Login
13.5.2. Changing Nagios Password リンクのコピーリンクがクリップボードにコピーされました!
リンクのコピーリンクがクリップボードにコピーされました!
The default Nagios user name and password is
nagiosadmin
and nagiosadmin
. This value is available in the /etc/nagios/cgi.cfg
file.
- Login as
root
user. - To change the default password for the Nagios Administrator user, run the following command with the new password:
htpasswd -c /etc/nagios/passwd nagiosadmin
# htpasswd -c /etc/nagios/passwd nagiosadmin
Copy to Clipboard Copied! Toggle word wrap Toggle overflow - Start Nagios and httpd services using the following commands:
service httpd restart service nagios restart
# service httpd restart # service nagios restart
Copy to Clipboard Copied! Toggle word wrap Toggle overflow - Verify Nagios access by using the following URL in your browser, and using the user name and password that was set in Step 2:
https://NagiosServer-HostName-or-IPaddress/nagios
https://NagiosServer-HostName-or-IPaddress/nagios
Copy to Clipboard Copied! Toggle word wrap Toggle overflow Figure 13.15. Nagios Login
13.5.3. Configuring SSL リンクのコピーリンクがクリップボードにコピーされました!
リンクのコピーリンクがクリップボードにコピーされました!
For secure access of Nagios URL, configure SSL:
- Create a 1024 bit RSA key using the following command:
openssl genrsa -out /etc/ssl/private/{cert-file-name.key} 1024
openssl genrsa -out /etc/ssl/private/{cert-file-name.key} 1024
Copy to Clipboard Copied! Toggle word wrap Toggle overflow - Create an SSL certificate for the server using the following command:
openssl req -key nagios-ssl.key -new | openssl x509 -out nagios-ssl.crt -days 365 -signkey nagios-ssl.key -req
openssl req -key nagios-ssl.key -new | openssl x509 -out nagios-ssl.crt -days 365 -signkey nagios-ssl.key -req
Copy to Clipboard Copied! Toggle word wrap Toggle overflow Enter the server's host name which is used to access the Nagios Server GUI as Common Name. - Edit the
/etc/httpd/conf.d/ssl.conf
file and add path to SSL Certificate and key files correspondingly forSSLCertificateFile
andSSLCertificateKeyFile
fields as shown below:SSLCertificateFile /etc/pki/tls/certs/nagios-ssl.crt SSLCertificateKeyFile /etc/pki/tls/private/nagios-ssl.key
SSLCertificateFile /etc/pki/tls/certs/nagios-ssl.crt SSLCertificateKeyFile /etc/pki/tls/private/nagios-ssl.key
Copy to Clipboard Copied! Toggle word wrap Toggle overflow - Edit the
/etc/httpd/conf/httpd.conf
file and comment the port 80 listener as shown below:Listen 80
# Listen 80
Copy to Clipboard Copied! Toggle word wrap Toggle overflow - In
/etc/httpd/conf/httpd.conf
file, ensure that the following line is not commented:<Directory "/var/www/html">
<Directory "/var/www/html">
Copy to Clipboard Copied! Toggle word wrap Toggle overflow - Restart the httpd service on the Nagios server using the following command:
service httpd restart
# service httpd restart
Copy to Clipboard Copied! Toggle word wrap Toggle overflow
13.5.4. Integrating LDAP Authentication with Nagios リンクのコピーリンクがクリップボードにコピーされました!
リンクのコピーリンクがクリップボードにコピーされました!
You can integrate LDAP authentication with Nagios plug-in. To integrate LDAP authentication, follow the steps given below:
- In apache configuration file
/etc/httpd/conf/httpd.conf
, ensure that LDAP is installed and LDAP apache module is enabled.The configurations are displayed as given below if the LDAP apache module is enabled.You can enable the LDAP apache module by deleting the # symbol.LoadModule ldap_module modules/mod_ldap.so LoadModule authnz_ldap_module modules/mod_authnz_ldap.so
LoadModule ldap_module modules/mod_ldap.so LoadModule authnz_ldap_module modules/mod_authnz_ldap.so
Copy to Clipboard Copied! Toggle word wrap Toggle overflow - Edit the
nagios.conf
file in /etc/httpd/conf.d/nagios.conf with the corresponding values for the following:- AuthBasicProvider
- AuthLDAPURL
- AuthLDAPBindDN
- AuthLDAPBindPassword
- Edit the CGI authentication file
/etc/nagios/cgi.cfg
as given below with the path where Nagios is installed.nagiosinstallationdir = /usr/local/nagios/ or /etc/nagios/
nagiosinstallationdir = /usr/local/nagios/ or /etc/nagios/
Copy to Clipboard Copied! Toggle word wrap Toggle overflow - Uncomment the lines shown below by deleting # and set permissions for specific users:
Note
Replace nagiosadmin and user names with * to give any LDAP user full functionality of NagiosCopy to Clipboard Copied! Toggle word wrap Toggle overflow - Restart
httpd
service andNagios
server using the following commands:service httpd restart service nagios restart
# service httpd restart # service nagios restart
Copy to Clipboard Copied! Toggle word wrap Toggle overflow