Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

at this point it is clear that I have no idea and neither do the google pages I am looking at

Browse source
This commit is contained in:
Stephen Smoogen 2017-06-23 17:33:52 +00:00
parent 73c9a0b035
commit 255d78da20
1 changed files with 13 additions and 18 deletions
Download patch file Download diff file Expand all files Collapse all files

31
roles/nagios_server/templates/httpd/nagios.conf.j2
View file

@ -29,33 +29,28 @@ Alias /nagios /usr/share/nagios/html/
</Directory> </Directory>
{% else %} {% else %}
<Directory "/usr/lib64/nagios/cgi-bin/">
SSLRequireSSL
Options ExecCGI
AllowOverride None
AuthName "Nagios GSSAPI Login"
GssapiCredStore keytab:/etc/krb5.HTTP_nagios-external{{env_suffix}}.fedoraproject.org.keytab
AuthType GSSAPI
# This is off because Apache (and thus mod_auth_gssapi) doesn't know this is proxied over TLS
GssapiSSLonly Off
GssapiLocalName on
Require valid-user
</Directory>
Alias /nagios "/usr/share/nagios/html" Alias /nagios "/usr/share/nagios/html"
<Directory "/usr/share/nagios/html">
SSLRequireSSL <Location ~ /nagios/>
Options None
AllowOverride None
AuthName "Nagios GSSAPI Login" AuthName "Nagios GSSAPI Login"
GssapiCredStore keytab:/etc/krb5.HTTP_nagios-external{{env_suffix}}.fedoraproject.org.keytab GssapiCredStore keytab:/etc/krb5.HTTP_nagios-external{{env_suffix}}.fedoraproject.org.keytab
AuthType GSSAPI AuthType GSSAPI
# This is off because Apache (and thus mod_auth_gssapi) doesn't know this is proxied over TLS GssapiSSLonly On
GssapiSSLonly Off
GssapiLocalName on GssapiLocalName on
GssapiPublishErrors On
Require valid-user Require valid-user
</Location>
<Location ~ "/nagios/cgi-bin/">
Options ExecCGI
</Location>
<Directory "/usr/share/nagios/html">
Options None
</Directory> </Directory>
{% endif %} {% endif %}