TS - hobbitpasswd

list Jim Sloan
Mon, 21 Dec 2009 15:05:40 -0500
Message-Id: <user-70712eb77736@xymon.invalid>
In the hobbit-apache.conf file where it has the setup for password, use
this.

 
AuthType Basic

AuthBasicProvider ldap

AuthGroupFile /usr/local/xymon/server/web/access

AuthLDAPURL
"ldap://ldap.server.domain/dc=domain,dc=com?sAMAccountName?sub?(objectCl
ass=*)"

AuthName "Xymon Admin - Use your AD account and password"

 
AuthzLDAPAuthoritative off

Require valid-user

Require group cn=Xymon_Administrators

AuthLDAPBindDN "someadaccouttobind at realm"

AuthLDAPBindPassword "youradpasswordusedtobind"

 
Making sure the following is commented out

 
   # AuthUserFile /usr/local/xymon/server/etc/hobbitpasswd

   # AuthGroupFile /usr/local/xymon/server/etc/hobbitgroups

   # AuthType Basic

   # AuthName "Xymon Administration"

 
    # "valid-user" restricts access to anyone who is logged in.

   # Require valid-user

 
    # "group admins" restricts access to users who have logged in, AND

    # are members of the "admins" group in hobbitgroups.

    # Require group admins

 
Jim Sloan

Chief Systems Architect - Corporate IT

S1 Corporation

Tel (direct): +X XXX XXX XXXX

Tel (switchboard): +X XXX XXX XXXX

user-682ab7a92de7@xymon.invalid

www.s1.com

 
Notice: This communication contains information that may be privileged,
confidential and/or exempt from disclosure under applicable law. If you
are not the intended recipient, you are hereby notified that any
disclosure, copying, distribution, or use of the information contained
herein (including any reliance thereon) is strictly prohibited. If you
received this transmission in error, please immediately contact the
sender and delete this communication.

 
From: user-9c1ae820b621@xymon.invalid [mailto:user-9c1ae820b621@xymon.invalid] 
Sent: Monday, December 21, 2009 12:14 PM
To: user-ae9b8668bcde@xymon.invalid
Subject: [hobbit] TS - hobbitpasswd 

 
Is there a way to use Active Directory credentials instead of or in
addition to the hobbitpasswd file?

This is to satisfy the Windows server group?

 
Thanks,

 
Tom Schmitt

Senior IT Staff - R&D

Phone (XXX) XXX-XXXX

Cell      (XXX) XXX-XXXX

eFax    (XXX) XXX-XXXX

user-9c1ae820b621@xymon.invalid

           \\\\||////

             \ ~  ~ /  

             | @  @ |   

--oOo---(_)---oOo--