1482 |
contains a username and a password separated with a single ':' |
contains a username and a password separated with a single ':' |
1483 |
character, like so; <EM>allow username:password</EM>. The username and |
character, like so; <EM>allow username:password</EM>. The username and |
1484 |
password must be written in clear-text.</P> |
password must be written in clear-text.</P> |
1485 |
<P>Alternatively you can use files in ``htpasswd'' format (one |
<P>Alternatively you can use files in ``htpasswd'' format (one |
1486 |
user:passwd entry per line), like so: |
user:passwd entry per line), like so: <EM>allow |
1487 |
<EM>allow [cleartext|crypt|md5] /path [users]</EM>. By default |
[cleartext|crypt|md5] /path [users]</EM>. By default cleartext |
1488 |
cleartext passwords are read. In case the passwords are digested |
passwords are read. In case the passwords are digested it is |
1489 |
it is necessary to specify the cryptographic method. In order |
necessary to specify the cryptographic method. In order to |
1490 |
to select the users their names can be added to the allow |
select the users their names can be added to the allow |
1491 |
statement. Otherwise all users are added.</P> |
statement. Otherwise all users are added.</P> |
1492 |
<P>Example: |
<P>Example:</P> |
1493 |
|
<PRE> |
1494 |
set httpd port 2812 |
set httpd port 2812 |
1495 |
allow hauk:monit |
allow hauk:password |
1496 |
allow md5 /etc/httpd/htpasswd peter paul mary</P> |
allow md5 /etc/httpd/htpasswd john paul ringo george</PRE> |
1497 |
<P>If you use this method together with a host list, then only |
<P>If you use this method together with a host list, then only |
1498 |
clients from the listed hosts will be allowed to connect to the |
clients from the listed hosts will be allowed to connect to the |
1499 |
monit http server and each client will be asked to provide a |
monit http server and each client will be asked to provide a |
1503 |
set httpd port 2812 |
set httpd port 2812 |
1504 |
allow localhost |
allow localhost |
1505 |
allow 10.1.1.1 |
allow 10.1.1.1 |
1506 |
allow hauk:monit</PRE> |
allow hauk:password</PRE> |
1507 |
<P>If you only want to use Basic Authentication, then just provide |
<P>If you only want to use Basic Authentication, then just provide |
1508 |
the one line with username and password, like:</P> |
allow entries with username and password, like so:</P> |
1509 |
<PRE> |
<PRE> |
1510 |
set httpd port 2812 |
set httpd port 2812 |
1511 |
allow hauk:monit</PRE> |
allow hauk:password |
1512 |
<P>Finally it is possible to define some users as read-only users. A |
allow admin:password</PRE> |
1513 |
|
<P>Finally it is possible to define some users as read-only. A |
1514 |
read-only user can read the monit web pages but will <EM>not</EM> get |
read-only user can read the monit web pages but will <EM>not</EM> get |
1515 |
access to any push-buttons and cannot change a service from the |
access to push-buttons and cannot change a service from the web |
1516 |
web interface.</P> |
interface.</P> |
1517 |
<PRE> |
<PRE> |
1518 |
set httpd port 2812 |
set httpd port 2812 |
1519 |
allow admin:password |
allow admin:password |
1520 |
allow hauk:monit read-only</PRE> |
allow hauk:password read-only</PRE> |
1521 |
<P>A user is set to read-only by using the <EM>read-only</EM> keyword |
<P>A user is set to read-only by using the <EM>read-only</EM> keyword |
1522 |
<STRONG>after</STRONG> username:password. In the above example the user <EM>hauk</EM> |
<STRONG>after</STRONG> username:password. In the above example the user <EM>hauk</EM> |
1523 |
is defined as a read-only user, while the <EM>admin</EM> user has all |
is defined as a read-only user, while the <EM>admin</EM> user has all |
1534 |
<P>Clients trying to connect to the server but supply the wrong |
<P>Clients trying to connect to the server but supply the wrong |
1535 |
username and/or password are logged with their ip-address.</P> |
username and/or password are logged with their ip-address.</P> |
1536 |
<P>If the monit command line interface is being used at least one |
<P>If the monit command line interface is being used at least one |
1537 |
cleartext password is necessary. Otherwise, the command line |
cleartext password is necessary. Otherwise, the monit command |
1538 |
interface would not connect to the http server.</P> |
line interface will not be able to connect to the monit daemon |
1539 |
|
server.</P> |
1540 |
<P> |
<P> |
1541 |
<HR> |
<HR> |
1542 |
<H1><A NAME="dependencies">DEPENDENCIES</A></H1> |
<H1><A NAME="dependencies">DEPENDENCIES</A></H1> |
1785 |
a username and password allowed to connect |
a username and password allowed to connect |
1786 |
to the server. More than one allow statement |
to the server. More than one allow statement |
1787 |
are allowed. This statement is also an |
are allowed. This statement is also an |
1788 |
optional part of the set httpd statement.</PRE> |
optional part of the set httpd statement. |
1789 |
|
read-only Set the user defined in username:password |
1790 |
|
to read only. A read-only user cannot change |
1791 |
|
a service from the monit web interface.</PRE> |
1792 |
<PRE> |
<PRE> |
1793 |
Here are the legal service entry keywords:</PRE> |
Here are the legal service entry keywords:</PRE> |
1794 |
<PRE> |
<PRE> |
1953 |
<P>Here's the complete list of reserved <STRONG>keywords</STRONG> used by monit:</P> |
<P>Here's the complete list of reserved <STRONG>keywords</STRONG> used by monit:</P> |
1954 |
<P><EM>if</EM>, <EM>then</EM>, <EM>else</EM>, <EM>set</EM>, <EM>daemon</EM>, <EM>logfile</EM>, |
<P><EM>if</EM>, <EM>then</EM>, <EM>else</EM>, <EM>set</EM>, <EM>daemon</EM>, <EM>logfile</EM>, |
1955 |
<EM>syslog</EM>, <EM>address</EM>, <EM>httpd</EM>, <EM>ssl</EM>, <EM>enable</EM>, <EM>disable</EM>, |
<EM>syslog</EM>, <EM>address</EM>, <EM>httpd</EM>, <EM>ssl</EM>, <EM>enable</EM>, <EM>disable</EM>, |
1956 |
<EM>pemfile</EM>, <EM>allow</EM>, <EM>check</EM>, <EM>init</EM>, <EM>pidfile</EM>, |
<EM>pemfile</EM>, <EM>allow</EM>, <EM>read-only</EM>, <EM>check</EM>, <EM>init</EM>, |
1957 |
<EM>statefile</EM>, <EM>group</EM>, <EM>start</EM>, <EM>stop</EM>, <EM>uid</EM>, <EM>gid</EM>, |
<EM>pidfile</EM>, <EM>statefile</EM>, <EM>group</EM>, <EM>start</EM>, <EM>stop</EM>, <EM>uid</EM>, |
1958 |
<EM>connection</EM>, <EM>port(number)</EM>, <EM>unix(socket)</EM>, <EM>type</EM>, |
<EM>gid</EM>, <EM>connection</EM>, <EM>port(number)</EM>, <EM>unix(socket)</EM>, <EM>type</EM>, |
1959 |
<EM>proto(col)</EM>, <EM>tcp</EM>, <EM>tcpssl</EM>, <EM>udp</EM>, <EM>alert</EM>, |
<EM>proto(col)</EM>, <EM>tcp</EM>, <EM>tcpssl</EM>, <EM>udp</EM>, <EM>alert</EM>, |
1960 |
<EM>mail-format</EM>, <EM>restart</EM>, <EM>timeout</EM>, <EM>checksum</EM>, <EM>resource</EM>, |
<EM>mail-format</EM>, <EM>restart</EM>, <EM>timeout</EM>, <EM>checksum</EM>, <EM>resource</EM>, |
1961 |
<EM>expect</EM>, <EM>send</EM>, <EM>mailserver</EM>, <EM>every</EM>, <EM>mode</EM>, <EM>active</EM>, |
<EM>expect</EM>, <EM>send</EM>, <EM>mailserver</EM>, <EM>every</EM>, <EM>mode</EM>, <EM>active</EM>, |
2576 |
<P> |
<P> |
2577 |
<HR> |
<HR> |
2578 |
<H1><A NAME="copyright">COPYRIGHT</A></H1> |
<H1><A NAME="copyright">COPYRIGHT</A></H1> |
2579 |
<P>Copyright (C) 2000-2003 by Contributors to the monit codebase. All |
<P>Copyright (C) 2000-2003 by the monit project group. All Rights |
2580 |
Rights Reserved. This product is distributed in the hope that it |
Reserved. This product is distributed in the hope that it will be |
2581 |
will be useful, but WITHOUT any warranty; without even the |
useful, but WITHOUT any warranty; without even the implied |
2582 |
implied warranty of MERCHANTABILITY or FITNESS for a particular |
warranty of MERCHANTABILITY or FITNESS for a particular purpose.</P> |
|
purpose.</P> |
|
2583 |
<P> |
<P> |
2584 |
<HR> |
<HR> |
2585 |
<H1><A NAME="see also">SEE ALSO</A></H1> |
<H1><A NAME="see also">SEE ALSO</A></H1> |