The bugs page forwarded me to this list.. We went ahead and took the
dive and migrated our NetSaint installation to Nagios 1.0b3. Everything
seems great for the most part, but the new "Downtime" page (/cgi-
bin/extinfo.cgi?&type=6). When any of our users try to use the Downtime
page to mark a host or service as down, it says we are not authorized:
----------
External Command Interface
Last Updated: Mon Jun 24 08:59:31 EDT 2002
NagiosTM - www.nagios.org
Logged in as strombt
Display context-sensitive help for this screen
Sorry, but you are not authorized to commit the specified command.
Read the section of the documentation that deals with authentication and
authorization in the CGIs for more information.
-----------
However, marking hosts & services down via other methods works just
fine. As you can see, that page (or at least the header) knows I am
logged in as "strombt". Nothing gets printed to the apache or nagios
logs it would appear. The access rights follow:
strombt@newton:/usr/local/nagios/etc% grep authorized_for cgi.cfg
authorized_for_system_information=*
#authorized_for_configuration_information=nagiosadmin,jdoe
authorized_for_configuration_information=*
authorized_for_system_commands=laytonj,toolsiem,strombt,jacksos,hallocd,petersk,
yagerm
authorized_for_all_services=*
authorized_for_all_hosts=*
authorized_for_all_service_commands=*
authorized_for_all_host_commands=*
Are others seeing this in their configurations with 1.0b3? If someone
needs the output, I can go ahead and recompile with debug mode enabled
(wish it was runtime, alas).
/ Thomas
This post was automatically imported from historical nagios-devel mailing list archives
Original poster: thomas+nagios@stromberg.org