Resources ¶
The configuration file resources.ini contains information about data sources that can be referenced in other
configuration files. This allows you to manage all data sources at one central place, avoiding the need to edit several
different files when the information about a data source changes.
Configuration ¶
Each section in resources.ini represents a data source with the section name being the identifier used to
reference this specific data source. Depending on the data source type, the sections define different directives.
The available data source types are db, ldap and ssh which will described in detail in the following
paragraphs.
| Type | Description |
|---|---|
| db | A database resource (e.g. Icinga 2 DB IDO or Icinga Web 2 user preferences) |
| ldap | An LDAP resource for authentication. |
| ssh | Manage SSH keys for remote access (e.g. command transport). |
Database ¶
A Database resource defines a connection to a SQL database which can contain users and groups to handle authentication and authorization, monitoring data or user preferences.
| Option | Description |
|---|---|
| type | Required. Specifies the resource type. Must be set to db. |
| db | Required. Database type. In most cases mysql or pgsql. |
| host | Required. Connect to the database server on the given host. For using unix domain sockets, specify localhost for MySQL and the path to the unix domain socket directory for PostgreSQL. |
| port | Required. Port number to use. MySQL defaults to 3306, PostgreSQL defaults to 5432. Mandatory for connections to a PostgreSQL database. |
| username | Required. The database username. |
| password | Required. The database password. |
| dbname | Required. The database name. |
| charset | Optional. The character set for the database connection. |
| use_ssl | Optional. Use SSL. Enables the following SSL options. |
| ssl_do_not_verify_server_cert | Optional. Disable validation of the server certificate. Only available for the mysql database and on PHP versions > 5.6. |
| ssl_cert | Optional. The file path to the SSL certificate. Only available for the mysql database. |
| ssl_key | Optional. The file path to the SSL key. Only available for the mysql database. |
| ssl_ca | Optional. The file path to the SSL certificate authority. Only available for the mysql database. |
| ssl_capath | Optional. The file path to the directory that contains the trusted SSL CA certificates, which are stored in PEM format.Only available for the mysql database. |
| ssl_cipher | Optional. A list of one or more permissible ciphers to use for SSL encryption, in a format understood by OpenSSL. For example: DHE-RSA-AES256-SHA:AES128-SHA. Only available for the mysql database. |
Example ¶
The name in brackets defines the resource name.
[icingaweb-mysql-tcp]
type = db
db = mysql
host = 127.0.0.1
port = 3306
username = icingaweb
password = icingaweb
dbname = icingaweb
[icingaweb-mysql-socket]
type = db
db = mysql
host = localhost
username = icingaweb
password = icingaweb
dbname = icingaweb
[icingaweb-pgsql-socket]
type = db
db = pgsql
host = /var/run/postgresql
port = 5432
username = icingaweb
password = icingaweb
dbname = icingaweb
LDAP ¶
A LDAP resource represents a tree in a LDAP directory. LDAP is usually used for authentication and authorization.
| Option | Description |
|---|---|
| type | Required. Specifies the resource type. Must be set to ldap. |
| hostname | Required. Connect to the LDAP server on the given host. You can also provide multiple hosts separated by a space. |
| port | Required. Port number to use for the connection. |
| root_dn | Required. Root object of the tree, e.g. ou=people,dc=icinga,dc=org. |
| bind_dn | Required. The user to use when connecting to the server. |
| bind_pw | Required. The password to use when connecting to the server. |
| encryption | Optional. Type of encryption to use: none (default), starttls, ldaps. |
| timeout | Optional. Connection timeout for every LDAP connection. Defaults to 5. |
| disable_server_side_sort | Optional. Disable server side sorting. Defaults to automatic detection whether the server supports this. |
Server Side Sorting ¶
Icinga Web automatically detects whether the LDAP server supports server side sorting.
If that is not the case, results get sorted on the client side.
There are LDAP servers though which report that they support this feature in general but have it disabled for certain
fields. This may lead to failures. With disable_server_side_sort it is possible to disable server side sorting and it
has precedence over the automatic detection.
Example ¶
The name in brackets defines the resource name.
[ad]
type = ldap
hostname = localhost
port = 389
root_dn = "ou=people,dc=icinga,dc=org"
bind_dn = "cn=admin,ou=people,dc=icinga,dc=org"
bind_pw = admin
SSH ¶
A SSH resource contains the information about the user and the private key location, which can be used for the key-based ssh authentication.
| Option | Description |
|---|---|
| type | Required. Specifies the resource type. Must be set to ssh. |
| user | Required. The username to use when connecting to the server. |
| private_key | Required. The path to the private key of the user. |
Example ¶
The name in brackets defines the resource name.
[ssh]
type = "ssh"
user = "ssh-user"
private_key = "/etc/icingaweb2/ssh/ssh-user"