External Weathermap Graph Links - Help Displaying Graphs

[tonyd]

Hello,

I have Weathermap running external to Cacti. Links all show correctly, flow, bandwidth, etc. However, when I hover over the graph no graph shows and when I click the link I'm presented with the Cacti login page. Clearly there's an authentication issue.

I really don't want to run weathermap as a plugin. This tool is used by both Tier 1 as well as escalated tiers. So I don't want the Cacti layer presented to Tier 1, too much info and confusing for those taking calls from customers. This is reserved for Tier 2 and 3. I just want the simple visual of the network traffic displayed for Tier 1 so they can look at it and go "hey", this link is Red or showing 0mb. And since I have this configuration, its great for the escalated tiers because we don't have to be logged into Cacti to see the visual of the network traffic flow. But I do use Cacti, obviously to poll for the interface stats, as well as provide nedtwork engineering with a much more detailed view of network metrics, etc.

So I'm trying to understand how I can wire this up and satisfy the apparent security. I haven't dug too deep into the internal code of Weathermap and how it pulls the data in order to populate the weathermap links. But I believe it pulls the data from the rra file which wouldn't go through the Cacti front end.

I've tried passing the username and password with the graph URL as:

http://username:password@server/cacti/g ... ph_id=1084

which prompts with the following:

Selection_003.png (37.37 KiB) Viewed 5159 times

and in the following format which does nothing..

http://server/cacti/graph.php?rra_id=al ... rectauth=1

So here's the perplexing thing. I have this very same set up on a server that WORKS. However, the server is old with FreeBSD 7. It's kernel panic'ing regularly. So I set up a fresh server. Set up cacti fresh. Copied my weathermap folder (configs, custom build scripts, etc) and all is working, all except the hover which uses http://server/cacti/graph.php?. I've reviewed my Apache server's directory directives as well as .htaccess files. I'm not seeing anything obvious.

I can, of course, simply require the user to click a link (at least once) and log into Cacti with the common credentials. At which point all the links hover works. However, I would prefer to not have this additional step as it does seem like a hack. And an additional authentication layer following the authentication they were already presented with to view the Weathermap.

So I'm reaching out to the Cacti forum to perhaps point out anything I'm missing, obvious or not. Anything you might be able to think of from your experience with Cacti/Weathermap/Server Admin would be wonderful!

In the end I want it to work like this....

Weathermap pulls cacti data and renders maps (Working)
User Access - Handled by Http PAM-Radius, .i.e. .htaccess and Apache Directives
User hovers over links to see graph

Thank you in advance!

[tonyd]

Greetings =)

Is there anybody with experience with this that could offer some insight?

Thank you very much

[XTech]

Did you check that Settings->Authentication->Authentication Method set to Web Basic Authentication on your new Cacti Server?

[tonyd]

I did not, I'm using Builtin Authentication (the default). If I change to Web Basic Authentication, would I not then have to manage my users via a .htpasswd file?

Thank you

[XTech]

Web basic authentitication intends usage of .htpasswd file and browser auth. request window, and password may be in url, although some of modern browsers deny such urls. Builtin auth. assumes a cacti default login/password webpage.

[tonyd]

That's what I thought but didn't know if Cacti was employing some sort of hybrid. I may consider, in the end, generating my own graphs and display. I do a lot of systems and tool coding for our company using Ruby and RoR. Would be pretty straight forward as I have the RRD files maintained by Cacti. But didn't want to go down that road if there was a simple option using Cacti to render the graphs. Thanks for you help and clarification.

Best