Page 1 of 1

Added ability to authenticate to CGIs using contactgroup nam

Posted: Mon Apr 07, 2014 1:24 pm
by mkhodave
How to use following Nagios feature mentioned in version log 3.3.1

#Added ability to authenticate to CGIs using contactgroup name

I am using very latest Nagios version 3.5.1 on my test machine.

I have test a lot , but can not find its solution

I have added one host , contact & contact group , assigned contact group to that host & created one user same as contactgroup & tried to login , Login is successful but that user can not able to see that host & its services.

Please help me if anyone having any idea.

Thanks
Madhukar

Mod Note: Moved to General Core Support Forums

Re: Added ability to authenticate to CGIs using contactgroup

Posted: Mon Apr 07, 2014 4:11 pm
by sreinhardt
I was able to create a new contact group and contact(named the same thing cg-test), add this contact to the group, then only add the contact group, to an existing host. I then logged in as this new contact, that had no rights and was attached directly to no hosts or services, only the contact group. I was successfully able to view the host, but not the services.

I then removed the contact from the group, and removed the contact entirely. Refreshed the page, and validated, that I had the same functionality of neither hosts nor services showing. Which is the same as you.

However I believe the changelog is really referring to the first case where the contact group has a contact, and that is really what you are authenticating as via proxy with the contact group. I will have to speak with the devs if this is actually intended or not.

Re: Added ability to authenticate to CGIs using contactgroup

Posted: Sat Apr 19, 2014 3:32 am
by mkhodave
Any update ?

Re: Added ability to authenticate to CGIs using contactgroup

Posted: Mon Apr 21, 2014 10:34 am
by sreinhardt
I have not had a chance to speak with that particular developer. Could you confirm if this is the behavior you are expecting to see or not?

Re: Added ability to authenticate to CGIs using contactgroup

Posted: Tue Apr 22, 2014 11:46 am
by mkhodave
I need contactgroup name can login on nagios web interface & see only hosts & services which they are added for notification.

Thanks

Re: Added ability to authenticate to CGIs using contactgroup

Posted: Tue Apr 22, 2014 4:47 pm
by abrist
Are you using the correct authorized_contactgroup_for_* directives in cgi.cfg? Or are you just adding the contactgroups to the standard authorized_for_* directives?

Code: Select all

authorized_contactgroup_for_all_hosts=
authorized_contactgroup_for_all_services=
authorized_contactgroup_for_system_information=
authorized_contactgroup_for_configuration_information=
authorized_contactgroup_for_all_host_commands=
authorized_contactgroup_for_all_service_commands=
authorized_contactgroup_for_system_commands=
authorized_contactgroup_for_read_only=

Re: Added ability to authenticate to CGIs using contactgroup

Posted: Mon Apr 28, 2014 4:15 am
by mkhodave
i was using standard authorized_for_* directives, I will test authorized_contactgroup_for_* directives in cgi.cfg in my nagios & let you know.

Re: Added ability to authenticate to CGIs using contactgroup

Posted: Mon Apr 28, 2014 11:32 am
by abrist
No problem. I don't think these new options are really documented yet. I will open up a bug report for them:
http://tracker.nagios.org/view.php?id=607