Setting up guest user for nagios

[Kenneth Holter]

Thanks for your reply.

I've ensured that user "guest" is only included in these two lists:

   - authorized_for_all_services=usernagios,guest
   - authorized_for_all_hosts=usernagios,guest

>From what I can see, the guest user will now only have read/view access to
Nagios. Are there any security or other problems to this approach that I
don't see?


Regards,
Kenneth


On 11/29/08, Hugo van der Kooij <hvdkooij at vanderkooij.org> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Kenneth Holter wrote:
> > Hi.
> >
> >
> > I need to configure a guest account so that anyone in the organization
> > interested in monitoring can log into our Nagios web interface.
> >
> > Setting up the guest user account is a matter of adding the guest user
> > to the required lines in "cgi.bin". What is the recommended practice
> > here? I were thinking I'd add "guest" to each of these lines, but I'm
> > not sure if these leaves the guest user with too much privileges:
> >
> >
> >     * authorized_for_system_information=usernagios
> >     * authorized_for_configuration_information=usernagios
> >     * authorized_for_system_commands=usernagios
>
> So they can now do pretty much shutdown operations?
>
> >     * authorized_for_all_services=usernagios
> >     * authorized_for_all_hosts=usernagios
> >
> > Does anyone have any recommendations on this?
>
> I think using nagvis or looking glass or .... seems the better way to
> add a view only account.
>
> Hugo.
>
> - --
> hvdkooij at vanderkooij.org               http://hugo.vanderkooij.org/
> PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc
>
>        A: Yes.
>        >Q: Are you sure?
>        >>A: Because it reverses the logical flow of conversation.
>        >>>Q: Why is top posting frowned upon?
>
> Bored? Click on http://spamornot.org/ and rate those images.
>
> Nid wyf yn y swyddfa ar hyn o bryd. Anfonwch unrhyw waith i'w gyfieithu.
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.7 (GNU/Linux)
> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org
>
> iD8DBQFJMREkBvzDRVjxmYERAvi5AJ9zi845wYju2HIVUmHPzrl8IA6uywCeMiOd
> V4TVW6zIioHLBbOdeTXeyyo=
> =HrH7
> -----END PGP SIGNATURE-----
>
> -------------------------------------------------------------------------
> This SF.Net email is sponsored by the Moblin Your Move Developer's
> challenge
> Build the coolest Linux based applications with Moblin SDK & win great
> prizes
> Grand prize is a trip for two to an Open Source event anywhere in the world
> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> _______________________________________________
> Nagios-users mailing list
> Nagios-users at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nagios-users
> ::: Please include Nagios version, plugin version (-v) and OS when
> reporting any issue.
> ::: Messages without supporting info will risk being sent to /dev/null
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.monitoring-lists.org/archive/users/attachments/20081209/fa9011f0/attachment.html>
-------------- next part --------------
------------------------------------------------------------------------------
SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
The future of the web can't happen without you.  Join us at MIX09 to help
pave the way to the Next Web now. Learn more and register at
http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
-------------- next part --------------
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null