Host service viewing permissions via authentication

[Carroll, Jim P [Contractor]]

If you check the archives (within the past month or two), you may notice I replied to a similar query.  If you dig back much further, you may notice I myself posted a similar query.

Here's what I've experienced:

- create DBA contact group
- add DBA contact group to DBA-relevant service definitions
- login as DBA
- see only services defined for the DBAs (as expected)
- see absolutely *no* hosts for the services which the DBAs are interested in

And that was iterating through all the menu options.  Quite a few of the menus resulted in the classic, "It appears you do not have permission...".

I can't quite recall what change I then experimented with, but it was dramatic.  As you've observed, suddenly the DBAs could see not just the host, but *all* the services on that host, not just the ones they're responsible for.  And yes, that included being able to acknowledge services that they shouldn't have been able to touch, acknowledge the host itself, schedule downtime for a service they're not responsible for, schedule downtime for the host itself....  In the end, I decided to give them the truncated view of the world.

I have yet to see a solution to this, but it's hardly a show-stopper.  In my world, it's mainly a quibble; I'd rather not distract Ethan and company away from more interesting/more productive activities.  :)

jc


> -----Original Message-----
> From: Jeff McKeon [mailto:jsm at inpro.net]
> Sent: Friday, May 09, 2003 7:46 AM
> To: Nagios List
> Subject: [Nagios-users] Host service viewing permissions via
> authentication
> 
> 
> I've got authentication turned on I've created a contact called
> "support"
> 
> --snip--
> 
> # 'Support' contact definition
> define contact{
>         contact_name                    support
>         alias                           Network Support
>         service_notification_period     24x7
>         host_notification_period        24x7
>         service_notification_options    w,c,r,u
>         host_notification_options       d,r,u
>         service_notification_commands   notify-by-email
>         host_notification_commands      host-notify-by-email
>         email                           support at foo.org
> --snip--
> 
> I've added the user to authentication using the htpasswd command and
> used the same name as in the contacts.cfg.  when this user 
> logs on, why
> can it see host and service details for hosts and services 
> for which it
> is NOT a contact?
> 
> -- 
> Jeff McKeon <jsm at inpro.net>
> 
> 
> 
> -------------------------------------------------------
> Enterprise Linux Forum Conference & Expo, June 4-6, 2003, Santa Clara
> The only event dedicated to issues related to Linux 
> enterprise solutions
> www.enterpriselinuxforum.com
> 
> _______________________________________________
> Nagios-users mailing list
> Nagios-users at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nagios-users
> ::: Please include Nagios version, plugin version (-v) and OS 
> when reporting any issue. 
> ::: Messages without supporting info will risk being sent to /dev/null
> 


-------------------------------------------------------
Enterprise Linux Forum Conference & Expo, June 4-6, 2003, Santa Clara
The only event dedicated to issues related to Linux enterprise solutions
www.enterpriselinuxforum.com

_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null