[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: HTTP: allowing a whole network to view the
From: |
Jan-Henrik Haukeland |
Subject: |
Re: HTTP: allowing a whole network to view the |
Date: |
Fri, 17 Oct 2003 01:51:38 +0200 |
User-agent: |
Gnus/5.1002 (Gnus v5.10.2) XEmacs/21.4 (Reasonable Discussion, linux) |
Guy <address@hidden> writes:
> Monit web page. i would like to know how to configure monit in order
> to allow the web page to be accessed by every machine on the network.
If you simply want the server to be accessible for all hosts do _not_
set the bind address for the server (or at least do not set it to
localhost). Use a statement like this:
set httpd port 2812
allow localhost
allow host1
allow host2
allow host3
...
You must define the host allowed to connect to the monit httpd server,
using several "allow host" statement as shown above. Unfortunately you
must specify each host on a line by itself, monit does _not_ support
wildcard ip-addresses such as "allow 193.12.44.*"
An alternative to "allow host" is to use basic authentication only,
then any host can connect to the monit httpd as long as the client
supply the correct username:password. If you choose this solution you
should run the monit httpd server over SSL (as shown below). If not
passwords will be transported over the network in cleartext (base64
encoded).
set httpd port 2812
enable SSL pemfile /etc/cert/monit.pem
allow admin:secret # Allow Basic Auth
allow foo:bar # Allow Basic Auth
You must select one of these authentication schemas or you can mix
them as described in the documentation. The last example is probably
the easiest and can save you a lot of "allow host" typing.
Cheers!
--
Jan-Henrik Haukeland