Restrict access to Nagios web interface

[emerson.candido]

Dear all,

I would like to restrict access for some users in Nagios Web to view just hosts and servers that are members of some hosts groups and services groups, e.g:

- These users could be able to view informations of hosts;
- These users could be able to view informations of services associated of hosts;
- These users could be able to schedule a downtime of associated hosts.

Someone knows a simple way to do it?


Thank you for your attention.

Emerson Candido

[mguthrie]

Are you using the v-shell interface, or the traditional Nagios core interface? Currently V-Shell doesn't have that feature yet, although we hope to have it built into the next major revision of it.

For Nagios core, if you authorize a user with apache, by default they cannot see anything. Once they are defined as a contact for a host or service they can view that information. You can use the config setting 'can_submit_commands' and that will allow the user to submit commands for any hosts/services that have access to.

Code: Select all

define contact {
        contact_name                            dummy
        alias                                   dummy
        host_notification_period                dummy_notification_times
        service_notification_period             dummy_notification_times
        host_notification_options               d,u,r,f,s
        service_notification_options            w,u,c,r,f,s
        can_submit_commands                     1
        email                                   dummy@localhost
        host_notifications_enabled              1
        service_notifications_enabled           1
        use                                     generic_contact
        }


[emerson.candido]

Hello,

First of all I would like to say thank you so much, it´s working very well.

Do you know if is possible to make the same kind of limitations to MRTG?


Best Regards

Emerson Candido

[mguthrie]

I'm not sure on that one as I haven't worked with MRTG as much. I would try reposting this on the Nagios Core general forum, you'll be much more likely to get a response to that question.