Skip to content

Grafana auto login

The solution described here works for me.

I did the following on the internal host where Grafana is installed:

  • Configured Apache (on port 80) as reverse proxy to Grafana (on port 3000)
  • Setup the virtualhost to add/set the required headers to login automatically as user admin

Relevant section from /etc/grafana/grafana.ini:

[auth.proxy]
enabled = true
;header_name = X-WEBAUTH-USER
;header_property = username
auto_sign_up = false

Apache config extract (you will need to enable mod_proxy, mod_proxy_http and mod_headers for this to work):

<VirtualHost *:80>
ProxyPreserveHost On
ProxyRequests Off
ProxyPass / http://localhost:3000/
ProxyPassReverse / http://localhost:3000/
RequestHeader set "X-WEBAUTH-USER" "admin"
</VirtualHost>

On a separate Apache instance exposed to more networks I did the following:

  • Configured Apache as reverse proxy to the internal instance
  • Restricted access from specific IP addresses
  • Setup a rule to redirect requests to the root of the website (and only those) to a specific dashboard

This is how the Apache config looks like (requires mod_proxy, mod_proxy_http and mod_alias; IP addresses, host names etc. changed)

<VirtualHost *:80>
ServerName sub.example.org
ServerAlias www.sub.example.org
<Location />
Require ip 192.0.2.0/24
Require ip 203.0.113.0/24
Require ip 2001:0db8:85a4::/64
Require ip 2001:0db8:85a5::/64
RedirectMatch ^/$ /dashboard/db/mydashboard
</Location>
ProxyPreserveHost On
ProxyRequests Off
ProxyPass / http://[2001:0db8:85a3::aaaa:8a2e:0370:7334]/
ProxyPassReverse / http://[2001:0db8:85a3::aaaa:8a2e:0370:7334]/
</VirtualHost>

Using a public IPv6 address on the internal host allows the whole thing to work with just a few firewall rules, without the need to mess with NAT or a VPN.
  • Twitter
  • Bookmark Grafana auto login at del.icio.us
  • Facebook
  • Google Bookmarks
  • FriendFeed
  • Digg Grafana auto login
  • Mixx Grafana auto login
  • Bloglines Grafana auto login
  • Technorati Grafana auto login
  • Fark this: Grafana auto login
  • Bookmark Grafana auto login at YahooMyWeb
  • Bookmark Grafana auto login at Furl.net
  • Bookmark Grafana auto login at reddit.com
  • Bookmark Grafana auto login at blinklist.com
  • Bookmark Grafana auto login at Spurl.net
  • Bookmark Grafana auto login at NewsVine
  • Bookmark Grafana auto login at Simpy.com
  • Bookmark Grafana auto login at blogmarks
  • Bookmark Grafana auto login with wists
  • wong it!
  • Bookmark using any bookmark manager!
  • Stumble It!
  • Print this article!
  • E-mail this story to a friend!
  • Identi.ca

Enable IPv6 on OSMC (wired and wireless)

Despite having read the opposite, it looks like IPv6 is disabled by default on the latest OSMC release (2015.06-1). I've tried adding a sysctl.d file to set /proc/sys/net/ipv6/conf/eth0/disable_ipv6 to 0, but this did not help. It worked only when I ran the command manually. By going through numerous forum posts I eventually found out that you need to use the connmanctl CLI tool:
root@osmc:~# connmanctl
connmanctl> services
*AO Wired ethernet_b827ebaabbcc_cable
connmanctl> config ethernet_b827ebaabbcc_cable --ipv6 auto preferred
connmanctl> quit
root@osmc:~#
This enables IPv6 with autoconfiguration, turns on Privacy Extensions and prefers these ephemeral addresses over the autoconfigured ones.

The same command works for wireless as well, you just need to select the appropriate interface (the service name will start with wifi_).

"help" will display basic usage info.

If for some reason you would like to disable IPv6, the command would be "config ... --ipv6 off".

  • Twitter
  • Bookmark Enable IPv6 on OSMC (wired and wireless) at del.icio.us
  • Facebook
  • Google Bookmarks
  • FriendFeed
  • Digg Enable IPv6 on OSMC (wired and wireless)
  • Mixx Enable IPv6 on OSMC (wired and wireless)
  • Bloglines Enable IPv6 on OSMC (wired and wireless)
  • Technorati Enable IPv6 on OSMC (wired and wireless)
  • Fark this: Enable IPv6 on OSMC (wired and wireless)
  • Bookmark Enable IPv6 on OSMC (wired and wireless) at YahooMyWeb
  • Bookmark Enable IPv6 on OSMC (wired and wireless) at Furl.net
  • Bookmark Enable IPv6 on OSMC (wired and wireless) at reddit.com
  • Bookmark Enable IPv6 on OSMC (wired and wireless) at blinklist.com
  • Bookmark Enable IPv6 on OSMC (wired and wireless) at Spurl.net
  • Bookmark Enable IPv6 on OSMC (wired and wireless) at NewsVine
  • Bookmark Enable IPv6 on OSMC (wired and wireless) at Simpy.com
  • Bookmark Enable IPv6 on OSMC (wired and wireless) at blogmarks
  • Bookmark Enable IPv6 on OSMC (wired and wireless) with wists
  • wong it!
  • Bookmark using any bookmark manager!
  • Stumble It!
  • Print this article!
  • E-mail this story to a friend!
  • Identi.ca

now with IPv6

In anticipation of World IPv6 Launch Day (6 June 2012), this website is now fully reachable over IPv6.
  • Twitter
  • Bookmark now with IPv6 at del.icio.us
  • Facebook
  • Google Bookmarks
  • FriendFeed
  • Digg now with IPv6
  • Mixx now with IPv6
  • Bloglines now with IPv6
  • Technorati now with IPv6
  • Fark this: now with IPv6
  • Bookmark now with IPv6 at YahooMyWeb
  • Bookmark now with IPv6 at Furl.net
  • Bookmark now with IPv6 at reddit.com
  • Bookmark now with IPv6 at blinklist.com
  • Bookmark now with IPv6 at Spurl.net
  • Bookmark now with IPv6 at NewsVine
  • Bookmark now with IPv6 at Simpy.com
  • Bookmark now with IPv6 at blogmarks
  • Bookmark now with IPv6 with wists
  • wong it!
  • Bookmark using any bookmark manager!
  • Stumble It!
  • Print this article!
  • E-mail this story to a friend!
  • Identi.ca

IPv6 test websites

  • Twitter
  • Bookmark IPv6 test websites at del.icio.us
  • Facebook
  • Google Bookmarks
  • FriendFeed
  • Digg IPv6 test websites
  • Mixx IPv6 test websites
  • Bloglines IPv6 test websites
  • Technorati IPv6 test websites
  • Fark this: IPv6 test websites
  • Bookmark IPv6 test websites at YahooMyWeb
  • Bookmark IPv6 test websites at Furl.net
  • Bookmark IPv6 test websites at reddit.com
  • Bookmark IPv6 test websites at blinklist.com
  • Bookmark IPv6 test websites at Spurl.net
  • Bookmark IPv6 test websites at NewsVine
  • Bookmark IPv6 test websites at Simpy.com
  • Bookmark IPv6 test websites at blogmarks
  • Bookmark IPv6 test websites with wists
  • wong it!
  • Bookmark using any bookmark manager!
  • Stumble It!
  • Print this article!
  • E-mail this story to a friend!
  • Identi.ca

Enabling IPv6 Privacy Extensions on all interfaces (Ubuntu Linux, may work for other distros too)

According to the Wikipedia IPv6 article, Privacy extensions are, except for the Windows platform and Mac OS X since 10.7 as well as iOS since version 4.3, not enabled by default.

In theory, one can enable the IPv6 Privacy Extensions on all interfaces at once using sysctl like this:
sudo sysctl net.ipv6.conf.all.use_tempaddr=2

However, this currently doesn't work as expected, so I'm using this one-liner in /etc/rc.local:
for IF in `/bin/ls /proc/sys/net/ipv6/conf/*/use_tempaddr` ; do echo 2 > $IF ; done

This also sets "use_tempaddr" for "default", which means it should also apply to interfaces added to the system afterwards.

A simple check to verify that the new configuration is working: ipv6-test.com will print your MAC address when available...

See also: Linux Kernel Bug 11655

  • Twitter
  • Bookmark Enabling IPv6 Privacy Extensions on all interfaces (Ubuntu Linux, may work for other distros too) at del.icio.us
  • Facebook
  • Google Bookmarks
  • FriendFeed
  • Digg Enabling IPv6 Privacy Extensions on all interfaces (Ubuntu Linux, may work for other distros too)
  • Mixx Enabling IPv6 Privacy Extensions on all interfaces (Ubuntu Linux, may work for other distros too)
  • Bloglines Enabling IPv6 Privacy Extensions on all interfaces (Ubuntu Linux, may work for other distros too)
  • Technorati Enabling IPv6 Privacy Extensions on all interfaces (Ubuntu Linux, may work for other distros too)
  • Fark this: Enabling IPv6 Privacy Extensions on all interfaces (Ubuntu Linux, may work for other distros too)
  • Bookmark Enabling IPv6 Privacy Extensions on all interfaces (Ubuntu Linux, may work for other distros too) at YahooMyWeb
  • Bookmark Enabling IPv6 Privacy Extensions on all interfaces (Ubuntu Linux, may work for other distros too) at Furl.net
  • Bookmark Enabling IPv6 Privacy Extensions on all interfaces (Ubuntu Linux, may work for other distros too) at reddit.com
  • Bookmark Enabling IPv6 Privacy Extensions on all interfaces (Ubuntu Linux, may work for other distros too) at blinklist.com
  • Bookmark Enabling IPv6 Privacy Extensions on all interfaces (Ubuntu Linux, may work for other distros too) at Spurl.net
  • Bookmark Enabling IPv6 Privacy Extensions on all interfaces (Ubuntu Linux, may work for other distros too) at NewsVine
  • Bookmark Enabling IPv6 Privacy Extensions on all interfaces (Ubuntu Linux, may work for other distros too) at Simpy.com
  • Bookmark Enabling IPv6 Privacy Extensions on all interfaces (Ubuntu Linux, may work for other distros too) at blogmarks
  • Bookmark Enabling IPv6 Privacy Extensions on all interfaces (Ubuntu Linux, may work for other distros too) with wists
  • wong it!
  • Bookmark using any bookmark manager!
  • Stumble It!
  • Print this article!
  • E-mail this story to a friend!
  • Identi.ca