Segregation of networks

[Marc Powell]

Robert Nelson <mailto:rnelson at windchannel.com> wrote:
> > -----Original Message-----
> > From: Marc Powell [mailto:marc at ena.com]
> > This is exactly what CGI authentication is for. When enabled,
> > contacts can only see hosts, hostgroups, and services that they are
> > contacts for. Create a contactgroup for the FWB people, a
> > contactgroup for the hotel people and make them contacts for their
> > respective hosts and services. The on-call guy should be a member
> > of both contactgroups. 
> 
> Yes, except most add-ons like grouplist.cgi ignore authentication and
> create the same left-hand menu for every user. Now, not only are all
> the groups still listed there, but the majority of them appear blank
> to the user.   

Sounds like bad or incomplete design on the part of whoever wrote
grouplist.cgi ;)

> 
> I've got the authentication in place, I've even hacked a few HTML
> pages together so that a specific user can only see their authorized
> hosts, but I do that by taking away the menu. I'd basically like to
> make two versions of the Nagios Web UI but still maintained by one
> set of config files on the backend. Does that make any sense?    

Yes, it makes sense but you'll probably have better luck fixing
grouplist.cgi to follow the nagios contacts paradigm than munging nagios
to fix a borked addon. It sounds like grouplist.cgi looks at the cfg
files directly so as long as you maintain one set of config files you're
still going to have the problem no matter how many different front ends
you create.

For the record, I've never used grouplist.cgi so I don't know if the
behavior you're seeing is a design decision, a bug or a configuration
issue. I would hope that any addon to nagios would respect the most
basic behaviors of the program.

--
Marc


-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 - 
digital self defense, top technical experts, no vendor pitches, 
unmatched networking opportunities. Visit www.blackhat.com
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null