Authenticated users cross-auth problem

[Jamie Baddeley]

Hi Greg,

Nope you're right on the money. It seems to me that the logic is based 
around/tied to hostgroup definitions.

Partitioned views IMHO are a really nice aspect of Nagios. Make the concept 
of "Online NOC" work......But it seems far more sensible to make these 
partitions aligned to services rather than hosts - after all the Nagger is 
service focussed not host focussed.

Maybe if it was tied it to a service dependency definition it'd work 
better. That'd be a really good reason to create service dependencies for 
something other than alert-storm prevention....

i.e customer A is dependent of service dependency thread Z & Y.

hmmm...

jamie


On Wed, 16 Jul 2003 19:58, Greg Vickers wrote:
> Hello all,
>
> I have a ticklish problem:
>
> From the manual:
> Authenticated contacts are granted the following permissions for each host
> for which they are contacts:
> 	* Authorization to view status information for all services on the host
>
> The only way I can see for someone to be authenticated for a host is to be
> authenticated for a service assigned to that host or be a contact for a
> hostgroup that contains that host. (Is this right?)
>
> Therefore:
> If I have Service A associated with Host A and Contact A is authorized to
> view the status of Service A, Contact A by default has permission to view
> the status etc of Host A.
> If I have Service B associated with Host A and Contact B is authorized to
> view the status of Service B, Contact B by default has permission to view
> the status of Host A, AND ANY SERVICES of Host A!
>
> Contact B can see the status of Service A, even though Contact B is *not*
> an authenticated contact of Service A! (Due to Contact B being authorized
> for Host A)
>
> Has anyone else come across this problem, or am not RTFMing properly? There
> has to be a way to have two services associated with one host and the
> respective contacts not being able to view the status of the other service.
>
> (I have tried assigning the services directly to a host and assigning them
> via hostgroups, the same undesirable situation occurs.)
>
> Please help!
>
> Thanks,
> Greg
>
> _________________________________________________________________
> Hotmail is now available on Australian mobile phones. Go to
> http://ninemsn.com.au/mobilecentral/signup.asp
>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: VM Ware
> With VMware you can run multiple operating systems on a single machine.
> WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines at the
> same time. Free trial click here: http://www.vmware.com/wl/offer/345/0
> _______________________________________________
> Nagios-users mailing list
> Nagios-users at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nagios-users
>
> ::: Please include Nagios version, plugin version (-v) and OS when
> ::: reporting any issue. Messages without supporting info will risk being
> ::: sent to /dev/null


-------------------------------------------------------
This SF.net email is sponsored by: VM Ware
With VMware you can run multiple operating systems on a single machine.
WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines at the
same time. Free trial click here: http://www.vmware.com/wl/offer/345/0
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null