1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
|
# Basic Authentication
## Overview
Basic Auth settings leverage both Apache's and NGINX Authentication modules
to grant a user access to the Cacti Website. The various configuration steps
for these modules will not be covered in the Cacti documentation. Therefore,
if you wish to use this authentication method, it is recommended that
you test your configuration on a development server before putting this
method into production.
> **NOTE**: Before enabling the **Basic Authentication Method**, you must
> always verify that you are prompted for a password before getting the
> normal Cacti login prompt, and that you have setup a new user account
> with Admin privileges that matches your login account. Otherwise
> when you enable Basic Authentication, you can lock yourself out of the
> Cacti Website.
## Special Users
The image below shows the settings for **Web Basic Authentication** which
includes the `Special Users` sub-section.
Those settings include:
- **Primary Admin** - This is the Cacti primary administrative account
this account will receive Cacti notifications and can not be deleted.
- **Guest Account** - This is a special account that allows users to
access certain pages without being prompted for a login and password.
Setting to `None`, disables this feature.
- **User Template** - All new users who login for the first time will
have their initial settings based upon this **User Template**.
- **Basic Auth Login Failure Message** - This textbox can be customized
in order to provide a useful message to users who have no access to
Cacti via Basic Authentication and how to resolve the issue.
- **Basic Auth Mapfile** - If your basic users do not match OS users
you can force a basic account to login with an alternate account.
## Basic Auth Mapfile
This settings is important for plugins that grant certain features
to accounts, but those accounts do not match the login account. For
example, your basic account maybe: joe.schmoe@company.com, and your
UNIX login account may be `jschmoe`, which grants you certain
plugin permissions, like controlling your own workload.
The mapfile is a file in CSV format, with the first column
being the Basic account (aka joe.schmoe@company.com), and the second
column being the login account (jschmoe). It is up-to the Cacti
administrator to manage and update this file per their local
site practices.
---
Copyright (c) 2004-2024 The Cacti Group
|
