Running Nagios using different user accounts
Posted: Tue Jun 02, 2015 4:05 am
Hey Support team,
We are currently evaluating Nagios within our company, but encounter certain issues with the way Nagios XI is designed. Within our company, we rely on configuration management systems for all sorts of things such as user management etc.
The problem we are facing is, that we cannot give the nagios / apache users the execution permission to run certain commands with "sudo", due to the wide use of the generic account "apache". The passwd, group and sudoers file are regularly overwritten by our CFM, so that we cannot make exceptions for certain hosts. Our security team has therefore recommended, to create a specific service account for nagios and apache, that can then be used to run nagios.
However, I cannot find any documentation or instructions on how to use alternative users to run Nagios XI.
Is there any way, that we can install Nagios (maybe some hidden parameter) and change the default users "nagios, apache" to something different like "abcnagios, abcapache"?
It would be a shame, if such a simple thing would prevent us from using Nagios in our enterprise.
Systemspecs:
CentOS 6.6 Final
Nagios XI version 2.7
Update:
I just found this older thread... very unfortunate, any changes here by any chance?
http://support.nagios.com/forum/viewtop ... er#p101929
Thanks
David
We are currently evaluating Nagios within our company, but encounter certain issues with the way Nagios XI is designed. Within our company, we rely on configuration management systems for all sorts of things such as user management etc.
The problem we are facing is, that we cannot give the nagios / apache users the execution permission to run certain commands with "sudo", due to the wide use of the generic account "apache". The passwd, group and sudoers file are regularly overwritten by our CFM, so that we cannot make exceptions for certain hosts. Our security team has therefore recommended, to create a specific service account for nagios and apache, that can then be used to run nagios.
However, I cannot find any documentation or instructions on how to use alternative users to run Nagios XI.
Is there any way, that we can install Nagios (maybe some hidden parameter) and change the default users "nagios, apache" to something different like "abcnagios, abcapache"?
It would be a shame, if such a simple thing would prevent us from using Nagios in our enterprise.
Systemspecs:
CentOS 6.6 Final
Nagios XI version 2.7
Update:
I just found this older thread... very unfortunate, any changes here by any chance?
http://support.nagios.com/forum/viewtop ... er#p101929
Thanks
David