Just posting that I figured out my issue.  I had the broadband contact group 
still listed as a contact in the linux-server template from when I orig set 
this up.  I am using a separate host template entry for the broadband check.  
Once I removed the broadband contact from the linux-server host template & 
restarted nagios, it worked as its supposed to.

Steve

From: a31mod...@hotmail.com
To: nagios-users@lists.sourceforge.net
Date: Tue, 2 Jul 2013 14:24:29 -0400
Subject: [Nagios-users] Question on adding additional user to Web cgi




Hello All,

Think I am missing something obvious here.  Running core 3.2 and an trying to 
add a user to the web console.  I only want this user to have rights to the 
hosts that he is a contact for.

I have a host group called broadband which has no services associated with it . 
 I am only using the host ping to the ip of the broadband interface to check if 
my remote broadbands are up & running.  I have a contact set up for this 
hostgroup  which gets an email if a broadband interface goes down.  I wanted to 
give the contact access to the nagios web console for this host group only to 
be able to acknowledge alerts.

I added a new user via htpasswd and have use-authentication=1 in the cgi.cfg 
file.  The user can log into the web console but sees all hosts and can run 
commands on other hosts outside of the broadband hostgroup  

Looks like everything in the cgi.cfg file is ok, the contact is not listed 
anywhere under any of the authorized_for_XXXX access.

What did I miss ??  From what I read, 



Authenticated contacts*
are granted the following permissions for each host for which they are
contacts (but not for hosts for which they are not contacts)...  If the contact 
broadband is not a contact for anything but the hostgroup store_broadband, why 
can he get into other hosts and put them in scheduled down time let alone see 
them?


Thanks,
Steve




                                          

------------------------------------------------------------------------------
This SF.net email is sponsored by Windows:

Build for Windows Store.

http://p.sf.net/sfu/windows-dev2dev
_______________________________________________
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null          
                          
------------------------------------------------------------------------------
This SF.net email is sponsored by Windows:

Build for Windows Store.

http://p.sf.net/sfu/windows-dev2dev
_______________________________________________
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null

Reply via email to