sni / Thruk

Thruk is a multibackend monitoring webinterface for Naemon, Nagios, Icinga and Shinken using the Livestatus API.
http://www.thruk.org
Other
408 stars 148 forks source link

thruk auth cookie path shouldn't include trailing slash #551

Closed mattpr closed 8 years ago

mattpr commented 8 years ago

Currently cookie path is set to /naemon/. I believe this issue can be simply resolved by changing the path set in the auth cookie without the trailing slash.

If I navigate to http://monitor-host/naemon/

This is an issue with the 1.0.3 release of Naemon/thruk installed via RPMs for 64bit centos 6.

My user-agent is in the following screenshots (showing both the above cases).

With trailing slash

thruk-with-slash

Without trailing slash

thruk-no-slash

sni commented 8 years ago

I'd say this is fixed in the nightly version of naemon already. Problem is, that either Firefox or Chrome or IE ( i cannot remember ) did not send the cookie if it does not contain the trailing slash. Latest Naemon should therefor just redirect naemon to naemon/

mattpr commented 8 years ago

Thanks for the quick update.