Authorization situation

[Lori Adams]

Before getting your reply, I had just figured that out. 

That's exactly what I did.

<Files cmd.cgi>
	Require user A
</File>

-Lori

> -----Original Message-----
> From: Tedman Eng [mailto:teng at dataway.com]
> Sent: Wednesday, December 21, 2005 11:10 AM
> To: Lori Adams; nagios-users at lists.sourceforge.net
> Subject: RE: [Nagios-users] Authorization situation
> 
> You can edit your web server's .htaccess or equivalent to restrict
access
> to
> cmd.cgi for the user.
> 
> Create a <files> clause in apache's .conf to restrict access as shown
in
> the
> the admin.cgi example:
> http://httpd.apache.org/docs/1.3/mod/core.html#files
> 
> 
> 
> -----Original Message-----
> From: Lori Adams [mailto:ladams at cloudmark.com]
> Sent: Wednesday, December 21, 2005 9:51 AM
> To: nagios-users at lists.sourceforge.net
> Subject: [Nagios-users] Authorization situation
> 
> 
> I'm using nagios 1.2 on gentoo.
> 
> Apache authentication works great.
> I've been reading the docs, and found some helpful information on
> authorizations on this list.  However, I am unable to exactly figure
out
> the
> right set of directives, to achieve what I'm looking for.
> 
> I have two users, A, and B.  A is allowed access to everything.  It
can
> view
> everything, and it can submit commands for all hosts and services.
> B is only allowed access to some hosts and their services.  I want B
to
> only
> be able to view some hosts and services, and *not* be able to submit
> commands.
> 
> I'm able to allow A access to everything, and B access to some hosts.
But
> B
> is still able to issue commands
> Configs so far with names changed to protect the innocent J  These
configs
> all A access to everything and B access to some hosts, but still able
to
> issue commands.  What is the combination of configs needed to make it
so B
> can only view some hosts and not issue commands and A can still do
> everything.
> 
> cgi.cfg:
> authorized_for_all_services=A
> authorized_for_all_hosts=A
> authorized_for_all_service_commands=A
> authorized_for_all_host_commands=A
> 
> contactgroups.cfg
>             define contactgroup {
>                         name                all
>                         members           A,B
>             }
>             define contactgroup {
>                         name                A-only
>                         members           A
>             }
> 
> 
> hostgroups.cfg
>             define hostgroup foo {
>                         ...
>                         contactgroups all
>             .           ...
>             }
> 
>             define hostgroup bar {
>                         ...
>                         contactgroups A-only
>                         ...
>             }
> 
> Thanks,
> -Lori


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_idv37&alloc_id865&op=click
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null