A question on nagios group nagcmd

[Marc Powell]

On Thu, Mar 10, 2011 at 1:19 PM, steve f <a31modela at hotmail.com> wrote:

My question is, the docs say to create the group nagcmd and add nagios &
> wwwrun to the group in order to allow external commands to be submitted thru
> the web interface.
>
> What external commands are we talking about here?  Are we talking about the
> service commands from the check screen ( disable checks, schedule downtime,
> etc)  .
>

Yes, you will not be able to use those. It's a straightforward unix
permissions thing.

Is is safe to assume that if wwwrun was not in the nagcmd group baaadddd
> things will happen in the web console?  Not anywhere near my system so I
> cant try to see what would happen.
>

I wouldn't say entirely bad. You'll have a complete view-only interface; you
just won't be able to schedule downtime, etc...

Any thoughts before I rewrite the central password system to put both a
> regular user & a daemon user in the same file  ?
>

Can you manually edit the group file or will that bork your system? You
*could* chmod 777 the command pipe but since it gets removed and recreated
every restart, you'd want to make that part of the init script.

--
Marc
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.monitoring-lists.org/archive/users/attachments/20110310/161f93e2/attachment.html>
-------------- next part --------------
------------------------------------------------------------------------------
Colocation vs. Managed Hosting
A question and answer guide to determining the best fit
for your organization - today and in the future.
http://p.sf.net/sfu/internap-sfd2d
-------------- next part --------------
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null