[checkmk-commits] [tribe29/checkmk] 1bbe06: 7819 FIX Fix "HTTP header authentication"

Lars noreply at github.com
Wed Jun 19 14:51:23 CEST 2019


  Branch: refs/heads/1.6.0
  Home:   https://github.com/tribe29/checkmk
  Commit: 1bbe068b4daa118c3d5168bb2fa6f06af3561a28
      https://github.com/tribe29/checkmk/commit/1bbe068b4daa118c3d5168bb2fa6f06af3561a28
  Author: Lars Michelsen <lm at tribe29.com>
  Date:   2019-06-19 (Wed, 19 Jun 2019)

  Changed paths:
    A .werks/7819
    M cmk/gui/http.py
    M cmk/gui/plugins/wato/check_mk_configuration.py

  Log Message:
  -----------
  7819 FIX Fix "HTTP header authentication"

The HTTP header authentication can be enabled in the Global Settings using the
option "Authenticate users by incoming HTTP requests". In case you do not use
this authentication method, you are not affected by this issue.

It is mostly used in some reverse proxy setups where the Checkmk apache is
located behind an authentication service. The authentication service only tells
Checkmk the authenticated username and the user interfaces allows the user to
enter without further authentication.

The user name is handed over as HTTP header with each HTTP request to the site
apache and forwarded to the GUI.

With Checkmk 1.5 or older in connection with apache 2.4 and Checkmk 1.6 with
all apache versions this feature can not be used anymore using HTTP header
variables containing other characters than <tt>A-z, a-z, 0-9 and -</tt>. For
example <tt>X-Remote-User</tt> is still working, while <tt>REMOTE_USER</tt>
(which uses the not allowed <tt>_</tt>) is not working anymore.

This 1.6.0b3 release fixes an issue in this header variable processing and
changes the default setting in the GUI to <tt>X-Remote-User</tt>.

If you configured this before with 1.5, you will have to check your
configuration and change the HTTP header variable in the reverse proxy and
Checkmk configuration to make it work with the new variable syntax.

Change-Id: I21bd6747e98f08001b25df9f4ce87b05caf25ad5


  Commit: 94ec44c1ebb4f9f68d042b2a9d7506355dbb1165
      https://github.com/tribe29/checkmk/commit/94ec44c1ebb4f9f68d042b2a9d7506355dbb1165
  Author: Lars Michelsen <lm at mathias-kettner.de>
  Date:   2019-06-19 (Wed, 19 Jun 2019)

  Changed paths:
    M cmk/gui/config.py
    M cmk/gui/plugins/wato/builtin_attributes.py
    M cmk/gui/watolib/host_attributes.py
    M cmk/utils/tags.py
    M cmk_base/data_sources/__init__.py
    M tests/unit/cmk/gui/watolib/test_host_attributes.py

  Log Message:
  -----------
  Improved naming of host attribute + topic

Change-Id: I7d427aa28ccf062f408ec1b6f31ccaa721718904


  Commit: 7054e12694dbebcc3a1e58a449b02396aacc0fbc
      https://github.com/tribe29/checkmk/commit/7054e12694dbebcc3a1e58a449b02396aacc0fbc
  Author: Lars Michelsen <lm at tribe29.com>
  Date:   2019-06-19 (Wed, 19 Jun 2019)

  Changed paths:
    M cmk/gui/plugins/wato/builtin_attributes.py
    M cmk/gui/watolib/groups.py
    M cmk/gui/watolib/host_attributes.py

  Log Message:
  -----------
  Make WATO host attribute sorting explicit

Change-Id: I53e78d31f494ca24cc557789e66d69c277366a0e


  Commit: 01d1670dff170865887c916dc7d1cf6ed61c6849
      https://github.com/tribe29/checkmk/commit/01d1670dff170865887c916dc7d1cf6ed61c6849
  Author: Lars Michelsen <lm at tribe29.com>
  Date:   2019-06-19 (Wed, 19 Jun 2019)

  Changed paths:
    M cmk/gui/plugins/wato/builtin_attributes.py
    M cmk/gui/watolib/groups.py
    M tests/unit/cmk/gui/watolib/test_host_attributes.py

  Log Message:
  -----------
  Changed order of host attributes

Change-Id: I8429c09b8eced135087c8af830d67a9f970a8945


  Commit: c64dabd8021d56d972ff2f2a5523fcd79ef272bc
      https://github.com/tribe29/checkmk/commit/c64dabd8021d56d972ff2f2a5523fcd79ef272bc
  Author: Lars Michelsen <lm at tribe29.com>
  Date:   2019-06-19 (Wed, 19 Jun 2019)

  Changed paths:
    M cmk/gui/watolib/host_attributes.py
    M tests/unit/cmk/gui/watolib/test_host_attributes.py

  Log Message:
  -----------
  Improve datasource attribute rendering

* Tag attributes can now be sorted just like other attributes,
  but only hard coded for the moment.
* Show SNMP credentials below SNMP datasource settings
* Improve order of "Data source" attributes: Agent > SNMP > Piggyback

Change-Id: I0420624a208f21e2114bc5812b0b34c3b0aa9ed8


  Commit: f10bddf0aa731faa44e92427f5993134d28d378e
      https://github.com/tribe29/checkmk/commit/f10bddf0aa731faa44e92427f5993134d28d378e
  Author: Lars Michelsen <lm at tribe29.com>
  Date:   2019-06-19 (Wed, 19 Jun 2019)

  Changed paths:
    M cmk/gui/plugins/wato/builtin_attributes.py
    M cmk/gui/plugins/wato/utils/__init__.py
    M cmk/gui/plugins/webapi/utils.py
    M cmk/gui/plugins/webapi/webapi.py
    M cmk/gui/wato/pages/bulk_edit.py
    M cmk/gui/wato/pages/folders.py
    M cmk/gui/wato/pages/hosts.py
    M cmk/gui/watolib/host_attributes.py
    M cmk/gui/watolib/hosts_and_folders.py
    M tests/unit/cmk/gui/watolib/test_host_attributes.py

  Log Message:
  -----------
  Hosts: Hide creation / locking info from create dialog

Change-Id: Ia6859ce1489acc4cba40d0adb0b9200507204416


  Commit: d8ee19dc4afab16b0b133b040f71ff1a9c0d2189
      https://github.com/tribe29/checkmk/commit/d8ee19dc4afab16b0b133b040f71ff1a9c0d2189
  Author: Lars Michelsen <lm at tribe29.com>
  Date:   2019-06-19 (Wed, 19 Jun 2019)

  Changed paths:
    M cmk/gui/plugins/wato/utils/__init__.py
    M cmk/gui/wato/pages/folders.py
    M cmk/gui/wato/pages/hosts.py
    M cmk/gui/wato/pages/search.py

  Log Message:
  -----------
  Moved basic host / cluster attributes into basic settings box

Change-Id: I9e2c1b7c53c7b796964eb6e32e6ee3ba9fcf1dfe


Compare: https://github.com/tribe29/checkmk/compare/1ebfd7fbe5f0...d8ee19dc4afa


More information about the checkmk-commits mailing list