Xymon Mailing List Archive search

open one page in main view to public

4 messages in this thread

list Rolf Schrittenlocher · Tue, 19 Nov 2019 10:44:18 +0100 ·
hi to all,

our xymon is secured by IP and password. Now we want to open one page in the main view to public (not world wide but a broader public). If I do this using apache all graphics, header und footer is missing, only the "ALT" text is presented. Any way to change this without giving access to other pages in xymon?

Thanks for help

Rolf

-- 
Mit freundlichen Gr??en
Rolf Schrittenlocher

Lokales Bibliothekssystem Frankfurt
Bockenheimer Landstr. 134-138, 60325 Frankfurt
Tel LBS: (49) 69 - 798 28830
Tel pers?nlich: (49) 69 - 798 28908
LBS: user-64314bfd1eb5@xymon.invalid
Pers?nlich: user-4b3b4051a09b@xymon.invalid
list Thomas Eckert · Tue, 19 Nov 2019 12:44:45 +0100 ·
Hi Rolf,

this might give away more details than you want: If you have `XYMONDLOGSTATUS=DYNAMIC` (the default) in `xymonserver.cfg` and allow the external users to view the detailed status via `svcstatus.sh` they can simply edit the URL and view info from another host (they need to know the hostname but obscurity should not be a security measure).

You _can_ restrict access to the CGIs but it is ? heavily under-documented (user `?access=/etc/xymon/xymongroups`-parameter with `CGI_SVC_OPTS` in `cgioptions.cfg` to use the group-file handling access ?) there may be some docs on the ML.

Maybe building a separate page-set (see `xymongen(1)`), build the status-pages static too with `XYMONDLOGSTATUS=STATIC` for that page-set and copy the img-resources to the destination-directory is a better maintainable and safer option.

Cheers
Thomas
quoted from Rolf Schrittenlocher
On 19 Nov 2019, at 10:44, Rolf Schrittenlocher <user-4b3b4051a09b@xymon.invalid> wrote:

hi to all,

our xymon is secured by IP and password. Now we want to open one page in the main view to public (not world wide but a broader public). If I do this using apache all graphics, header und footer is missing, only the "ALT" text is presented. Any way to change this without giving access to other pages in xymon?

Thanks for help

Rolf

-- 
Mit freundlichen Gr??en
Rolf Schrittenlocher

Lokales Bibliothekssystem Frankfurt
Bockenheimer Landstr. 134-138, 60325 Frankfurt
Tel LBS: (49) 69 - 798 28830
Tel pers?nlich: (49) 69 - 798 28908
LBS: user-64314bfd1eb5@xymon.invalid
Pers?nlich: user-4b3b4051a09b@xymon.invalid

list Rolf Schrittenlocher · Tue, 19 Nov 2019 13:06:43 +0100 ·
Thanks Thomas,
Maybe building a separate page-set (see `xymongen(1)`), build the status-pages static too with `XYMONDLOGSTATUS=STATIC` for that page-set and copy the img-resources to the destination-directory is a better maintainable and safer option.
this seems to be a good solution. The page set exists. I cannot find 
where to set XYMONDLOGSTATUS. Is it a parameter for xymongen?

kind regards
quoted from Thomas Eckert

Rolf

-- 
Mit freundlichen Gr??en
Rolf Schrittenlocher

Lokales Bibliothekssystem Frankfurt
Bockenheimer Landstr. 134-138, 60325 Frankfurt
Tel LBS: (49) 69 - 798 28830
Tel pers?nlich: (49) 69 - 798 28908
LBS: user-64314bfd1eb5@xymon.invalid
Pers?nlich: user-4b3b4051a09b@xymon.invalid
list Thomas Eckert · Wed, 20 Nov 2019 07:00:31 +0100 ·
Good morning Rolf,
It's a variable set in 'xymonserver.cfg'.

Cheers
Thomas


quoted from Rolf Schrittenlocher
On Nov 19, 2019 13:06, Rolf Schrittenlocher wrote:

Thanks Thomas,
> Maybe building a separate page-set (see `xymongen(1)`), build the status-pages static too with `XYMONDLOGSTATUS=STATIC` for that page-set and copy the img-resources to the destination-directory is a better maintainable and safer option.

this seems to be a good solution. The page set exists. I cannot find
where to set XYMONDLOGSTATUS. Is it a parameter for xymongen?

kind regards

Rolf

--

Mit freundlichen Grüßen

quoted from Rolf Schrittenlocher

Rolf Schrittenlocher

Lokales Bibliothekssystem Frankfurt
Bockenheimer Landstr. 134-138, 60325 Frankfurt
Tel LBS: (49) 69 - 798 28830

Tel persönlich: (49) 69 - 798 28908
LBS: user-64314bfd1eb5@xymon.invalid
Persönlich: user-4b3b4051a09b@xymon.invalid