On Tue, 6 Feb 2007, Andrew Elwell wrote:
> Brew, CAJ (Chris) wrote:
>> I'd like to set up gridsite authentication for my nagios server so I can
>> authenticate with grid certificates.
>
> Not used gridsite, but it's fairly simple to do with plain vanilla mod-ssl
The same here, it was quite trivial to setup, if you don't already have
gridsite, and don't need all of it's ACL fun, i believe it's the way
forward.
> See my recent posting on the scotgrid website for background
> (hmm. light on detail - infact the bit you want is
> http://httpd.apache.org/docs/2.0/ssl/ssl_howto.html#arbitraryclients
>
> in the nagios conf, I set most of the user list parts to *
> There's a screenshot of what you see on nagios at
>
> http://www.gridpp.ac.uk/wiki/Nagios
>
> Andrew
I've attached part of our config as an example. t's apache2, but i believe
it's enough to get you going.
One gotcha we had, my certificate is valid within 1 level, but my
colleagues crtificates required setting SSLVerifyDepth to 2.
Cheers,
Colin Morey
Northgrid Systems Manager,
Manchester Tier2 Centre
|