Authorization situation

[Tedman Eng]

You can edit your web server's .htaccess or equivalent to restrict access to
cmd.cgi for the user.

Create a <files> clause in apache's .conf to restrict access as shown in the
the admin.cgi example:
http://httpd.apache.org/docs/1.3/mod/core.html#files



-----Original Message-----
From: Lori Adams [mailto:ladams at cloudmark.com]
Sent: Wednesday, December 21, 2005 9:51 AM
To: nagios-users at lists.sourceforge.net
Subject: [Nagios-users] Authorization situation


I'm using nagios 1.2 on gentoo.
 
Apache authentication works great.
I've been reading the docs, and found some helpful information on
authorizations on this list.  However, I am unable to exactly figure out the
right set of directives, to achieve what I'm looking for.
 
I have two users, A, and B.  A is allowed access to everything.  It can view
everything, and it can submit commands for all hosts and services.  
B is only allowed access to some hosts and their services.  I want B to only
be able to view some hosts and services, and *not* be able to submit
commands.
 
I'm able to allow A access to everything, and B access to some hosts.  But B
is still able to issue commands
Configs so far with names changed to protect the innocent J  These configs
all A access to everything and B access to some hosts, but still able to
issue commands.  What is the combination of configs needed to make it so B
can only view some hosts and not issue commands and A can still do
everything.

cgi.cfg:
authorized_for_all_services=A
authorized_for_all_hosts=A
authorized_for_all_service_commands=A
authorized_for_all_host_commands=A
 
contactgroups.cfg
            define contactgroup {
                        name                all
                        members           A,B
            }
            define contactgroup {
                        name                A-only
                        members           A
            }
 
 
hostgroups.cfg
            define hostgroup foo {
                        ...
                        contactgroups all
            .           ...
            }
 
            define hostgroup bar {
                        ...
                        contactgroups A-only
                        ...
            }
 
Thanks,
-Lori


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null