Dear all,
greetings everybody, this is my first post.
Reading through the Check_MK docs it is not clear to me if it is possibile to setup a single sign on for multiple OMD sites using Multisite connected to a LDAP.
My configuration looks as follows:
–> Global site
--> Site A
--> Site B
--> Site C
The idea is to login at Global site and then having the possibility to access all children sites without authenticating over again.
While the form authentication works fine when hovering on the pnp4nagios the WebGui shows an authentication error.
I would appreciate if you could clarify this aspect.
Of course the obvious fallback would be to configure the Apache authentication using the same authentication domain for all the sites.
Kind regards,
Marco
Hi Marco,
which docs are you referring to? Aand what mechanism do you wanna use?
LDAP auth Apache builtin or Multisite Login?
You should definitely read
http://mathias-kettner.de/checkmk_multisite_modproxy.html - and pay
special attention to the section "The AuthName"...
Regards,
Marcel
···
2013/10/11 Marco Tizzoni <marco.tizzoni@gmail.com>:
Dear all,
greetings everybody, this is my first post.
Reading through the Check_MK docs it is not clear to me if it is possibile
to setup a single sign on for multiple OMD sites using Multisite connected
to a LDAP.
My configuration looks as follows:
--> Global site
--> Site A
--> Site B
--> Site C
The idea is to login at Global site and then having the possibility to
access all children sites without authenticating over again.
While the form authentication works fine when hovering on the pnp4nagios the
WebGui shows an authentication error.
I would appreciate if you could clarify this aspect.
Of course the obvious fallback would be to configure the Apache
authentication using the same authentication domain for all the sites.
Kind regards,
Marco
_______________________________________________
checkmk-en mailing list
checkmk-en@lists.mathias-kettner.de
http://lists.mathias-kettner.de/mailman/listinfo/checkmk-en
HI Marcel,
thanks for you reply.
···
On Fri, Oct 11, 2013 at 8:51 PM, Marcel Schulte schulte.marcel@gmail.com wrote:
Hi Marco,
which docs are you referring to?
This one: http://mathias-kettner.de/checkmk_multisite_ldap_integration.html
Aand what mechanism do you wanna use?
LDAP + multisite
LDAP auth Apache builtin or Multisite Login?
You should definitely read
http://mathias-kettner.de/checkmk_multisite_modproxy.html - and pay
special attention to the section “The AuthName”…
Yep, I read it and that’s what I was referring to as the fallback.
The question is: can I use LDAP + multisite and achieve the same as configuring Apache authentication with equal realm for every site?
Thanks,
Marco
Hi Marco,
we're not using Multisite cookie auth (yet) but you should read this
thread dealing with the same, with hints by Mathias Kettner as the
thread's sixth message:
http://www.mail-archive.com/checkmk-en@lists.mathias-kettner.de/msg07968.html
HTH,
Marcel
···
2013/10/11 Marco Tizzoni <marco.tizzoni@gmail.com>:
HI Marcel,
thanks for you reply.
On Fri, Oct 11, 2013 at 8:51 PM, Marcel Schulte <schulte.marcel@gmail.com> > wrote:
Hi Marco,
which docs are you referring to?
This one: http://mathias-kettner.de/checkmk_multisite_ldap_integration.html
Aand what mechanism do you wanna use?
LDAP + multisite
LDAP auth Apache builtin or Multisite Login?
You should definitely read
http://mathias-kettner.de/checkmk_multisite_modproxy.html - and pay
special attention to the section "The AuthName"...
Yep, I read it and that's what I was referring to as the fallback.
The question is: can I use LDAP + multisite and achieve the same as
configuring Apache authentication with equal realm for every site?
Thanks,
Marco