Question on adding additional user to Web cgi

[steve f]

Just posting that I figured out my issue.  I had the broadband contact group still listed as a contact in the linux-server template from when I orig set this up.  I am using a separate host template entry for the broadband check.  Once I removed the broadband contact from the linux-server host template & restarted nagios, it worked as its supposed to.

Steve

From: a31modela at hotmail.com
To: nagios-users at lists.sourceforge.net
Date: Tue, 2 Jul 2013 14:24:29 -0400
Subject: [Nagios-users] Question on adding additional user to Web cgi




Hello All,

Think I am missing something obvious here.  Running core 3.2 and an trying to add a user to the web console.  I only want this user to have rights to the hosts that he is a contact for.

I have a host group called broadband which has no services associated with it .  I am only using the host ping to the ip of the broadband interface to check if my remote broadbands are up & running.  I have a contact set up for this hostgroup  which gets an email if a broadband interface goes down.  I wanted to give the contact access to the nagios web console for this host group only to be able to acknowledge alerts.

I added a new user via htpasswd and have use-authentication=1 in the cgi.cfg file.  The user can log into the web console but sees all hosts and can run commands on other hosts outside of the broadband hostgroup  

Looks like everything in the cgi.cfg file is ok, the contact is not listed anywhere under any of the authorized_for_XXXX access.

What did I miss ??  From what I read, 



Authenticated contacts*
are granted the following permissions for each host for which they are
contacts (but not for hosts for which they are not contacts)...  If the contact broadband is not a contact for anything but the hostgroup store_broadband, why can he get into other hosts and put them in scheduled down time let alone see them?


Thanks,
Steve




 		 	   		  

------------------------------------------------------------------------------
This SF.net email is sponsored by Windows:

Build for Windows Store.

http://p.sf.net/sfu/windows-dev2dev
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.monitoring-lists.org/archive/users/attachments/20130702/22bafacf/attachment.html>
-------------- next part --------------
------------------------------------------------------------------------------
This SF.net email is sponsored by Windows:

Build for Windows Store.

http://p.sf.net/sfu/windows-dev2dev
-------------- next part --------------
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null