Remove service and host commands from user interface.

[jpttdi]

Before my mailbox blown up, please don't read in my last message:
 
"Feel free to tell me "you should buy a real tool"... if there's no other solution..."
 
But read:
 
"Feel free to tell me "you should use another tool"... if there's no other solution..." 
 
 
;-)
...
 
Thanks.
Jpt.

jpttdi <jpttdi at yahoo.fr> wrote:
Hi all,
 
Can someone help me ???
 
I would like to set up an user account which cannot access services or hosts commands but which can be managed like every other users account (be a contact for some hostgroups, receive notifications ...)
 
I've never seen a monitoring tool which allow any operator to disable services or hosts checks, does nagios assume that every user is a system administrator ?
 
Feel free to tell me "you should buy a real tool"... if there's no other solution...
 
 
Thanks.
 
Jpt.
 
 


jpttdi <jpttdi at yahoo.fr> wrote:
Brad,
 
I have created an user account which is not a nagios contact but which is listed in the authorized_for_all_hosts/service directive in cgi.cfg.
 
Yes, it works by this way, but this setting comes with other problems:
 
-This account can see all the hosts and services set up in nagios , i want them to see only a part of them (the production server for which nagios configuration is ok).
 
-As they are not contacts for any hosts or services, they don't receive any notifications (email...), which is a problem for me.
 
If someone have another workaround...
 
 
Thanks,
Jpt.
 


Brad Johnson <bjohnson at got.wedgie.org> wrote:
Marc,

Good point Marc - thanks for correcting me on that. That would explain why
it isn't working in your situation, Jpt. You could always create some user
called "observer" that wasn't a nagios contact. Then in the cgi.cfg file
you could give observer access to host and service status info, but not
commands.

Might that work?

- Brad

On Thu, 18 Sep 2003, Marc Powell wrote:

> Respectfully, that's not the functionality of those options. The
> default is for a user to be able to see and issue any commands against
> any hosts and services for which they are listed as a contact. The
> authorized_for_* commands grant additional permissions to specific
> users for _all_ hosts and services monitored, not just for the ones
> they are listed as a contact for.
> 
> --
> Marc
> 
> > -----Original Message-----
> > From: Brad Johnson [mailto:bjohnson at got.wedgie.org]
> > Sent: Thursday, September 18, 2003 9:59 AM
> > To: jpttdi
> > Cc: nagios-users at lists.sourceforge.net
> > 
> > Can't you just use the authorized_for_all_host_commands and
> > authorized_for_all_service_commands variables in cgi.cfg? If you don't
> > want your user to be able to issue commands, just make sure the account's
> > username isn't listed in those variables. Users will still be able to see
> > the commands, even issue them. But as soon as they submit a command for
> > processing, nagios will ignore it and give them an error message unless
> > the username is listed in those variables.
> > 
> > I think that should accomplish what you're looking for. Hope it helps.
> > 
> > - Brad
> > 
> > On Thu, 18 Sep 2003, [iso-8859-1] jpttdi wrote:
> > 
> > > Hi,
> > >
> > > I would like to know if it's possible to hide the hosts and services
> > commands in the user interface for particular user.
> > >
> > > I have set up an account for monitoring users, and i don't want them to
> > be able to disable checks of a service or to disable notifications (all
> > that you can do with services and hosts commands)
> > >
> > > I found in the manual a lot of options to grant additionnal rights to
> > user but nothing about retrieving the right to disable notifications or
> > checks !
> > >
> > > Is there any way to do that ?
> > >
> > >
> > >
> > > Thanks.
> > > Jpt.
> > >
> > >
> > >
> > >
> > > ---------------------------------
> > > Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français !
> > > Testez le nouveau Yahoo! Mail
> > 
> > 
> > 
> > -------------------------------------------------------
> > This sf.net email is sponsored by:ThinkGeek
> > Welcome to geek heaven.
> > http://thinkgeek.com/sf
> > _______________________________________________
> > Nagios-users mailing list
> > Nagios-users at lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/nagios-users
> > ::: Please include Nagios version, plugin version (-v) and OS when
> > reporting any issue.
> > ::: Messages without supporting info will risk being sent to /dev/null
> 




-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue.
::: Messages without supporting info will risk being sent to /dev/null


---------------------------------
Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français !
Testez le nouveau Yahoo! Mail


---------------------------------
Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français !
Testez le nouveau Yahoo! Mail


---------------------------------
Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français !
Testez le nouveau Yahoo! Mail
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.monitoring-lists.org/archive/users/attachments/20030923/21d7f640/attachment.html>