Xymon Mailing List Archive search

Hobbit Login Credentials

list Buchan Milne
Mon, 19 Mar 2007 10:18:35 +0200
Message-Id: <user-3bbe105f2b2b@xymon.invalid>

On Sunday 18 March 2007, Ellison, Gary wrote:
Hello,


I had a consulting firm setup Hobbit monitoring for my company and they
literally closed down business over night without giving me the login id
and password. Is there any way you may be able to help me regain
administration access?
Hobbit does not use password authentication at all itself.

Any restrictions on accessing parts of Hobbit are usually done at by adding 
access controls to the URLs in the web server.

E.g., it could be using htpasswd files for authentication.

So, locate the section of the web server configuration that relates to the 
Hobbit URLs to find the authentication configuration.

For example, on my installation, I use /etc/http/conf.d/hobbit-apache.conf, 
which has a section like this:

<Directory "/usr/lib/hobbit/cgi-secure">
    AllowOverride None
    Options ExecCGI Includes
    Order allow,deny
    Allow from all

      <IfModule mod_authz_ldap.c>
      AuthzLDAPMethod ldap
      AuthzLDAPServer xxxxx
      AuthzLDAPUserBase ou=People,dc=xx
      AuthzLDAPUserKey uid
      AuthzLDAPUserScope onelevel
      #AuthzLDAPGroupBase ou=group,dc=xx
      #AuthzLDAPGroupKey cn
      #AuthzLDAPMemberKey member
      AuthType basic
      AuthName "Monitoring authentication"
      require valid-user
      #require group monitoring
      </IfModule>
</Directory>

-- 
Buchan Milne
ISP Systems Specialist - Monitoring/Authentication Team Leader
B.Eng,RHCE(803004789010797),LPIC-2(LPI000074592)