Nagios Looking Glass - Authentication

[Andy Shellam]

No you're not missing anything.  NLG and Nagios authentication are two 
completely different things.

NLG was originally designed as a public facing service for ISPs to 
provide a "self-help" website where their customers could check on their 
network status, or for IT departments to show the rest of their business 
departments the state of the network, so it didn't make sense to have 
any sort of security model in place.

However since it's release it's become apparent that Nagios admins would 
like to restrict users to only see certain hosts/groups of hosts, so 
this is being built into the next major release of NLG (anticipated in 
4-6 months time.)

The authentication option in Nagios Looking Glass is only required to be 
set if the polling script (server/s3_poller.php) sits behind a 
.htaccess-protected directory (recommended.)

Andy.

Carlo Piccini wrote:
>
> I have a question about configuration:
>
> I use authentication in nagios web interface, and I use authenticated 
> contacts to give access to only certain hosts/services to users.
>
>  
>
> Example:
>
>  
>
> User johndoe is a contact for server1 and server3
>
> User foobar is a contact for server2
>
>  
>
> In nagios web interface user johndoe can only access services residing 
> on server1 and server3, while user foobar only sees server2.
>
> I expected this to be true for NLG too, but I found that using 
> $ServerFeed_AuthEnabled = 1 and indicating the user/password in the 
> config files, gives user johndoe access to server1, server2, server3.
>
> The same apply for user foobar.
>
>  
>
> Am I missing something?
>
> Thanks,
>
> Carlo Piccini
>
> !DSPAM:37,4631d94689292060128473!
> ------------------------------------------------------------------------
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by DB2 Express
> Download DB2 Express C - the FREE version of DB2 express and take
> control of your XML. No limits. Just data. Click to get it now.
> http://sourceforge.net/powerbar/db2/
>
> !DSPAM:37,4631d94689292060128473!
>   
> ------------------------------------------------------------------------
>
> _______________________________________________
> Nagios-users mailing list
> Nagios-users at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nagios-users
> ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
> ::: Messages without supporting info will risk being sent to /dev/null
>
> !DSPAM:37,4631d94689292060128473!
>   


-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null