Public and Admin Permissions

[Rusch, Daniel]

Yes, We have our site set up that way. Guests can view most things but only
admins can change stuff.


I'm running apache so in httpd.conf:


ScriptAlias /nagios/cgi-bin/ /usr/local/nagios/sbin/
<Directory "/usr/local/nagios/sbin/">
    <Files cmd.cgi>
        AuthName "Nagios Access"
        AuthType Basic
        AuthUserFile /usr/local/nagios/etc/.htpasswd.users
        require valid-user
    </Files>
    Options ExecCGI
    Order allow,deny
    Allow from all
</Directory>

Alias /nagios/ /usr/local/nagios/share/
<Directory "/usr/local/nagios/share">
    Options None
    AllowOverride AuthConfig
    Order allow,deny
    Allow from all
</Directory>

I did this here instead of in an .htaccess file for two reasons:
1. The httpd.conf is loaded once, where as the .htaccess file is read every
time access to the directory is requested.
2. It puts all the config stuff in one place

Next, to be able to actually view services etc on the Nagios site as a
guest, we need to add "guest" to the following (be careful where you add
guest so that they can't make changes) in the cgi.cfg file in
/usr/local/nagios/etc :

default_user_name=guest

authorized_for_system_information=nagiosadmin,guest

authorized_for_configuration_information=nagiosadmin,guest

authorized_for_all_services=nagiosadmin,guest
authorized_for_all_hosts=nagiosadmin,guest

HTH

Dan

-----Original Message-----
From: Jeff Falgout [mailto:JFalgout at co.jefferson.co.us]
Sent: Friday, August 09, 2002 9:49 AM
To: nagios-users at lists.sourceforge.net
Subject: [Nagios-users] Public and Admin Permissions


I am trying to setup Nagios to allow all users on the network to view
the status of
hosts and services while restricting cgi's such as cmd.cgi to admins.
In other words, 
prompt for a password when the user tries to execute restricted cgi's.
I want to 
avoid having to force guest users to enter guest with a blank password
through basic
auth. 

Has anyone else done this, or is this even possible?

Any ideas? 

Cheers



Jeff Falgout
System Administrator
IT Operations
Jefferson County, CO
Phone: 303.271.8859
Fax: 303.271.8838
Internet: jfalgout at co.jefferson.co.us


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf