exposing curl options for web monitoring (ZBXNEXT-403)

[ZBXNEXT-373] 'curl -NTLM' option in "Web Monitor" to use with Microsoft IIS based NTLM web sites(like CRM or Sharepoint) Created: 2010 May 24  Updated: 2017 May 31  Resolved: 2010 Sep 09

Status: Closed
Project: ZABBIX FEATURE REQUESTS
Component/s: None
Affects Version/s: None
Fix Version/s: 1.8.4

Type: Change Request (Sub-task) Priority: Critical
Reporter: Benjamin Shtark Assignee: Unassigned
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified
Environment:

zabbix 1.8 on CentOS 5.4 linux.

Attachments: JPEG File screenshot-1.jpg    

 Description   

Hi Guys

I was wondering, if you could add \"curl -ntlm\" option into Web Monitoring feature in future releases.
unfortunately many sites (especialy ones running on IIS) are using NTLM as authentication protocol, thus it is impossible to monitor them using \"none\" or \"basic\" auth method provided in zabbix\'s Web monitoring.
I tried to find a solution, but it seems like there is only 2 options right now available for me:
1. patch zabbix (including DB schema) , which seems complicated and i dont know how to do it.
2. create a script do do the basic checks using curl -ntlm

{host}

.
which seems easier but it lacks all the beauty Web Monitor provides.

The problem happens when I try to add NTLM based (Microsoft IIS) web sites to Web Monitor.
I get 401 error in zabbix interface.

For Example:

If I run this from shell:

[root@zabbix ]# curl --anyauth -u "username:password" http://server_name/folder/loader.aspx
HTTP Error 401.2 - Unauthorized: Access is denied

But if I run this:
[root@zabbix ]# curl --NTLM -u "username:password" http://server_name/folder/loader.aspx
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 9138 100 9138 0 0 122k 0 -::- -::- -::- 122k

<html>
<head>
<link rel="SHORTCUT ICON" href="/favicon.ico" />
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=utf-8">
<script type="text/javascript">
....
....
....
</frameset>
</frameset>
</html>

So, as you can see, in order to "view" contents of NTLM based web sites I need somehow tell zabbix to
Include NTLM flag in libcurl when connecting using Web Monitor(which he doesn't do by default).

 Comments   
Comment by Benjamin Shtark [ 2010 May 24 ]

configuration page for IIS based Microsoft Dynamics CRM.

Comment by richlv [ 2010 Sep 05 ]

just wondering, why would the db patching be required ? couldn't that just be added as another value in the authentication type field ?

Comment by Benjamin Shtark [ 2010 Sep 05 ]

well.. honestly i dont know.
problem with zabbix is that features like that requires you to know how to program/edit code of zabbix itself.
And it is something that requires knowledge, which many dont have.
I have tried to use all my skill to make zabbix use ntlm as a parameter when monitoring MS websites, but unfortunately with no success..

regarding DB patching, it is something i found on one of forums/sites, and dont really sure if its needed or not...

Comment by Aleksandrs Saveljevs [ 2010 Sep 09 ]

Support for NTLM authentication in both frontend and server available in development branch svn://svn.zabbix.com/branches/dev/zbxnext-373-curl-ntlm-auth.

Comment by Aleksandrs Saveljevs [ 2010 Sep 14 ]

Merged into pre-1.8.4 in r14442.

Generated at Sun Dec 14 00:07:15 EET 2025 using Jira 10.3.13#10030013-sha1:56dd970ae30ebfeda3a697d25be1f6388b68a422.