Check HTTP service with NTLM

General
,
1

Hello everyone,
is there a way to check a website behind an NTLM authentication ?

2

Hi @Marvin700,
Did you already find a way on how to accomplish this?

3

Hi,

as far as I know the old and the new check_http version does support NTLM authentication.

There is a bash script in the treasures (~/share/doc/check_mk/treasures/check_curl) which could work, I have not tested it for NTLM.

To monitor our websites which requires NTLM authentication, we set the expected status code to 401:
image

But this is only a workaround. You can not use Content check expressions and you may have failed login attempts in the Logs of the Web Serverā€¦

Best Regards
Thomas

1 Like
4

Hi @T.Schmitz,

Thanks for the tip! I gave https://exchange.icinga.com/VerosK/another-http-check/releases and https://docs.checkmk.com/latest/en/active_checks.html#nagios_plugins a try and it works.
One caveat, however, is that the authentication credentials show up on the GUI and in the logs, since it is not possible to use Checkmkā€™s password storage :frowning: So I decided to write a shell wrapper script. But this is ultimately tedious for managing lots of checksā€¦

So, better ideas will be highly appreciated here :wink:

Best,
Matthias

5

If you use a classic Nagios check then you also can use the Nagios user macros.
These macros are stored inside ~/etc/nagios/resource.cfg.
Later inside the check definition you can use these macros like $USER1$ and so on.

2 Likes