Xymon Mailing List Archive search

sensitive data

2 messages in this thread

list Gavin Leonard · Thu, 25 Sep 2008 15:52:31 -0600 ·
The hobbit page contains a lot of sensitive information how would one go about securing it with passwords or ssl? Or both?


Gavin Leonard

[cid:image001.gif at 01C91F26.B7EE8410]

Director, Systems-Network Engineering

T

 XXX-XXX-XXXX

F

 XXX-XXX-XXXX

E

 user-d65663809eb4@xymon.invalid<mailto:user-d65663809eb4@xymon.invalid>


Research | Marketing | Sales Generation

www.progrexion.com<http://www.progrexion.com/>;


This email and its contents are confidential. If you are not the intended recipient, delete this email and do not use or disclose the information within this email or its attachments. Thank you.
list Alan Sparks · Thu, 25 Sep 2008 16:14:54 -0600 ·
You really need to do some reading up on Apache for this... for SSL, you
need to look into the mod_ssl module, there is a lot of good tutorials
on configuring this.

For access control, this is handled also by Apache.  You need to modify
the Apache configuration for applying basic authentication (or another
model, Apache supports many) to the "/hobbit/" and "/hobbit-cgi/" URL
prefixes.  Note that the "/hobbit-seccgi" implements basic
authentication, you may be able to use that as a model.

The sample file in the distribution, "hobbit-apache.conf", often
installed as /etc/httpd/conf.d/hobbit-apache.conf, is probably where the
action is.

Hope that gives you a start.
-Alan
quoted from Gavin Leonard

Gavin Leonard wrote:
The hobbit page contains a lot of sensitive information how would one
go about securing it with passwords or ssl? Or both?

 
*Gavin Leonard***

	

cid:image001.gif at 01C856AD.922EF120

Director, Systems-Network Engineering

*T*

	
 XXX-XXX-XXXX

*F*

	
 XXX-XXX-XXXX

*E*

	
 user-d65663809eb4@xymon.invalid <mailto:user-d65663809eb4@xymon.invalid>

	
Research | Marketing | Sales Generation

	
*www.progrexion.com* <http://www.progrexion.com/>;
quoted from Gavin Leonard

 
This email and its contents are confidential. If you are not the
intended recipient, delete this email and do not use or disclose the
information within this email or its attachments. Thank you.