Security in the cgi

[Marc Powell]

> -----Original Message-----
> From: nagios-users-admin at lists.sourceforge.net [mailto:nagios-users-
> admin at lists.sourceforge.net] On Behalf Of Rafael Bandeira da Costa
> Sent: Thursday, March 09, 2006 9:06 AM
> To: nagios-users at lists.sourceforge.net
> Subject: Re: [Nagios-users] Security in the cgi
> 
> Alan Maxwell escreveu:
> 
> 	Is it possible to setup the security to allow a login to be able
> acknowledge alerts but not be able to disable services and hosts?
> 	Using nagios 2.0
> 
> 
> 
> You can secure it within apache. I just use the following in my
> /etc/httpd/conf.d/nagios.conf (maybe you use another file to that)
> 
> <Files cmd.cgi>
>         Require user nagios
> </Files>
> 
> Hope that helps you.


This is incorrect information. The level of granularity requested is not
possible with apache security or within Nagios itself. It's all or
nothing unfortunately unless you edit the source to include that
functionality.

--
Marc


-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid0944&bid$1720&dat1642
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null