Using Unix groupnames in contact definitions or cgi authorization schemes

[Morris, Patrick]

Mark Elsen wrote:
>  - I was wondering wether one can use UNIX groupnames in contact
> defintions , or in cgi auth. directives
> such as 'authorized_for_all_service_commands=..." ; instead of having
> to use individual usernames ?
>
> I need to make a simple distinction between a couple of divisions,
> regarding nagios access and
> server monitoring in our company. Using individual usernames would be
> cumbersome w.r.t  the simple
> allowed views I want to use in the NAGIOS (console).


The only way to pull this off, really, is to define contactgroups in 
Nagios that match your Unix groups.  Since Nagios does not deal with 
Unix users and groups directly, you'd need something like a script that 
generated Nagios configs from your account information.

In our case here, that's relatively trivial. A simple script can go out 
and pull a group and its members from LDAP and reformat that information 
into a Nagios config. I suppose it wouldn't be much harder to do it with 
local accounts, if we had a script to parse the group information from 
the passwd and group files.

So I guess the short answer is no, Nagios doesn't know how to deal with 
Unix account info directly, but that doesn't mean you can't do what 
you're trying to do.

------------------------------------------------------------------------------
The Planet: dedicated and managed hosting, cloud storage, colocation
Stay online with enterprise data centers and the best network in the business
Choose flexible plans and management services without long-term contracts
Personal 24x7 support from experience hosting pros just a phone call away.
http://p.sf.net/sfu/theplanet-com
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null