AW: How limit external commands to no-admin users?

[Thomas.Zimmer at oppenheim.de]

Add only the admin-group to the according functions in "cgi.cfg" => only
users from the admin group are allowed to execute cgi-commands. 

Other groups/users may be added to the services directly, so that they can
view services and hosts.

The authorization for nagios-objects and functions is controlled by nagios,
only secondary by your webserver (your webserver only provides the
authentication-functionality)

greetz, thomas.

----------------------------------------------------------------------------
-----------------
Thomas Zimmer
Sal. Oppenheim jr. & Cie.
Aushilfe / IT
Tel.: 
----------------------------------------------------------------------------
------------


-----Ursprüngliche Nachricht-----
Von: nagios-users-admin at lists.sourceforge.net
[mailto:nagios-users-admin at lists.sourceforge.net] Im Auftrag von Marco
Borsani
Gesendet: Donnerstag, 17. März 2005 11:33
An: nagios-users
Betreff: [Nagios-users] How limit external commands to no-admin users?



Hi all

My environment is quite complex, specially regarding security policies.

I would use external commands via CGI interface, but I can not permit to ALL
nagios users.

My httpd have been started from www (unix user); putting this user in the
nagios group I permit to write the nagios.cmd file to everyone !

I need to limit this "write access" only to a unix/apache user only.

Is it possible? How?

I try to modify httpd.conf file, but .... I do not know how !

Thanks
Marco



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting
any issue. 
::: Messages without supporting info will risk being sent to /dev/null


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_ide95&alloc_id396&op=click
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null