Problem with CGI authentication and service visibility

[Dmitry Sivachenko]

Hello!

I am using nagios-2.0b4 (the same problem exists with 2.0b3).

Imagine the following configuration:

I have two contacts: user1 (the only member of contact_group USER1)
and user2 (the only member of contact_group USER2).

I want to monitor the only host (host1) with two services on it:
service1 and service2.

I have use_authentication=1 in my cgi.cfg.

I want to achieve the following configuration: both user1 and user2 are
contacts for host problems and can view host information via web.

user1 is the contact for both services monitored and can view them via web.
user2 is the contact only for service2 and should not know anything about 
service1.

In my host definition, I use:
define host {
	name	host1
	contact_groups USER1,USER2
...
}

I define services as follows:

define service {
	host_name host1
	service_description service1
	contact_groups USER1
...
}

define service {
        host_name host1
        service_description service2
        contact_groups USER1,USER2
...
}


I expect user2 to be able to observe only service2 via web-interface.
But it is not the case, user2 can view both services.

If I remove USER2 from contact_groups for host1 leaving services definitions
the same, I achieve what I want.

Is it a bug or a feature?  How can I solve my problem?

Thanks in advance!


-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null