IIS Server Security - ASP.NET 1.1 + IIS 5 + Nagios

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > August 2006 > ASP.NET 1.1 + IIS 5 + Nagios





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author ASP.NET 1.1 + IIS 5 + Nagios
danielsanberger@googlemail.com

2006-08-09, 1:27 pm

Hi all there,

we have a APS.NET 1.1 Application running on IIS 5 and SQL Server 2000.
We use Integrated Windows Security.

Now we want to monitor the application by use of Nagios. It seems that
Nagios doesn't support keberos. So another idea is to additionally set
basic authentication that a monitoring-user can access the page.

My question is, can I enable basic authentication only for that one
user?
Or does someone have information about Nagios running with kerberos?

Thanks a lot
Daniel

jigs4u4ever

2006-08-09, 1:27 pm

Hi,

To monitor the web applcation using NAGIOS there is nothing to do with
"Intergrated windows authentication" or "kerberos", what you have to do is
install the nagios windows plugins available on the Nagios site to the
windows web server which will check for the service and site avilabilty at
specific time intervall, the plugin will act like a client and send the
updates to the Nagios server about the service and site status. Go for plugin
as it will give you more felxiblility as u can also monitor specific URL and
not only services.

Thanks & Regards
Jigs4u_4ever

"danielsanberger@googlemail.com" wrote:

> Hi all there,
>
> we have a APS.NET 1.1 Application running on IIS 5 and SQL Server 2000.
> We use Integrated Windows Security.
>
> Now we want to monitor the application by use of Nagios. It seems that
> Nagios doesn't support keberos. So another idea is to additionally set
> basic authentication that a monitoring-user can access the page.
>
> My question is, can I enable basic authentication only for that one
> user?
> Or does someone have information about Nagios running with kerberos?
>
> Thanks a lot
> Daniel
>
>

danielsanberger@googlemail.com

2006-08-10, 1:32 pm

Hi,

we couldn't relate to that. When we access the application Nagios tries
to authentificate with NLTM and that fails!
Actually the only way, it seems to work, is with basic authentication!
We couldn't find a plugin that would help us!

Greetings
Daniel

jigs4u4ever schrieb:
[vbcol=seagreen]
> Hi,
>
> To monitor the web applcation using NAGIOS there is nothing to do with
> "Intergrated windows authentication" or "kerberos", what you have to do is
> install the nagios windows plugins available on the Nagios site to the
> windows web server which will check for the service and site avilabilty at
> specific time intervall, the plugin will act like a client and send the
> updates to the Nagios server about the service and site status. Go for plugin
> as it will give you more felxiblility as u can also monitor specific URL and
> not only services.
>
> Thanks & Regards
> Jigs4u_4ever
>
> "danielsanberger@googlemail.com" wrote:
>

Roger Abell [MVP]

2006-08-11, 7:26 am

Perhaps it is that they are failing to negotiate a common
version of NTLM or of NTLM signing ?

<danielsanberger@googlemail.com> wrote in message
news:1155215659.271331.192040@h48g2000cwc.googlegroups.com...
> Hi,
>
> we couldn't relate to that. When we access the application Nagios tries
> to authentificate with NLTM and that fails!
> Actually the only way, it seems to work, is with basic authentication!
> We couldn't find a plugin that would help us!
>
> Greetings
> Daniel
>
> jigs4u4ever schrieb:
>
>



danielsanberger@googlemail.com

2006-08-11, 7:26 am

yes, that is the problem! Any idea how to avoid that?

Roger Abell [MVP] schrieb:
[vbcol=seagreen]
> Perhaps it is that they are failing to negotiate a common
> version of NTLM or of NTLM signing ?
>
> <danielsanberger@googlemail.com> wrote in message
> news:1155215659.271331.192040@h48g2000cwc.googlegroups.com...

Roger Abell [MVP]

2006-08-11, 1:38 pm

You just need to make certain that the allowed settings for
NTLM in the effective group policies of both machines will
allow for a common version (I use NTLM v2 only) and for
an agreed level on NTLM communications security.
It is all in the local security policy, or dominating GPOs
security options settings.

<danielsanberger@googlemail.com> wrote in message
news:1155280508.198626.91510@i42g2000cwa.googlegroups.com...
> yes, that is the problem! Any idea how to avoid that?
>
> Roger Abell [MVP] schrieb:
>
>



danielsanberger@googlemail.com

2006-08-16, 7:29 am

Hi,

are you talking about the Core AddOn NRPE?

Greetings


jigs4u4ever schrieb:
[vbcol=seagreen]
> Hi,
>
> To monitor the web applcation using NAGIOS there is nothing to do with
> "Intergrated windows authentication" or "kerberos", what you have to do is
> install the nagios windows plugins available on the Nagios site to the
> windows web server which will check for the service and site avilabilty at
> specific time intervall, the plugin will act like a client and send the
> updates to the Nagios server about the service and site status. Go for plugin
> as it will give you more felxiblility as u can also monitor specific URL and
> not only services.
>
> Thanks & Regards
> Jigs4u_4ever
>
> "danielsanberger@googlemail.com" wrote:
>

danielsanberger@googlemail.com

2006-08-16, 7:29 am

hmmm, I didn't mention that our Nagios is running under Linux. We don`t
know how to teach NTLM to Linux!?



Roger Abell [MVP] schrieb:
[vbcol=seagreen]
> You just need to make certain that the allowed settings for
> NTLM in the effective group policies of both machines will
> allow for a common version (I use NTLM v2 only) and for
> an agreed level on NTLM communications security.
> It is all in the local security policy, or dominating GPOs
> security options settings.
>
> <danielsanberger@googlemail.com> wrote in message
> news:1155280508.198626.91510@i42g2000cwa.googlegroups.com...

Roger Abell [MVP]

2006-08-19, 1:25 am

hmmmm . . .
well, samba does teach it ot linux, but I am not sure nagios would use it


<danielsanberger@googlemail.com> wrote in message
news:1155719351.993941.97240@p79g2000cwp.googlegroups.com...
> hmmm, I didn't mention that our Nagios is running under Linux. We don`t
> know how to teach NTLM to Linux!?
>
>
>
> Roger Abell [MVP] schrieb:
>
>



danielsanberger@googlemail.com

2006-08-19, 1:24 pm

ok, think we=B4re gonna leave it since it is to complicated... we solved
it in the way that we enabled basic authentication just for that one
..aspx-site. That is all and it works ;)

Thanks for your help

Daniel


Roger Abell [MVP] schrieb:
[vbcol=seagreen]
> hmmmm . . .
> well, samba does teach it ot linux, but I am not sure nagios would use it
>
>
> <danielsanberger@googlemail.com> wrote in message
> news:1155719351.993941.97240@p79g2000cwp.googlegroups.com...
to[vbcol=seagreen]
end[vbcol=seagreen]
Go[vbcol=seagreen]
ver[vbcol=seagreen]
ems[vbcol=seagreen]
e=2E[vbcol=seagreen]

danielsanberger@googlemail.com

2006-08-19, 1:24 pm

ok, think we=B4re gonna leave it since it is to complicated... we solved
it in the way that we enabled basic authentication just for that one
..aspx-site. That is all and it works ;)

Thanks for your help

Daniel


Roger Abell [MVP] schrieb:
[vbcol=seagreen]
> hmmmm . . .
> well, samba does teach it ot linux, but I am not sure nagios would use it
>
>
> <danielsanberger@googlemail.com> wrote in message
> news:1155719351.993941.97240@p79g2000cwp.googlegroups.com...
to[vbcol=seagreen]
end[vbcol=seagreen]
Go[vbcol=seagreen]
ver[vbcol=seagreen]
ems[vbcol=seagreen]
e=2E[vbcol=seagreen]

Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com