Page 1 of 1

Controlling user access with ContactGroups

Posted: Fri Dec 11, 2015 4:49 pm
by ChathamDaleJ
I have controlled user access with contacts in the host definition, but contact_grooups seems not to work. Oddly, in the display at the top of the home page where wordds are colored red, yellow, brown or green, contactroup seems to work for that display. However, when I try to look at the host, it seems not to work. Should it?

Thanks,

Dale

Re: Controlling user access with ContactGroups

Posted: Mon Dec 14, 2015 10:07 am
by lmiltchev
Are you talking about the links under the "Host Status Summary" and/or "Service Status Summary" sections on the "Home" page? Can you show us a few screenshots, describing the problem, and the configs of the host, and the contactgroup added to this host?

Re: Controlling user access with ContactGroups

Posted: Wed Dec 16, 2015 8:43 am
by ChathamDaleJ
I added a user, daletest.
I added a group daletest.
I then added as a contact_group to both the host definition and the service definition, daletest.
When I log into Nagios as daletest, if I go to Configure -> Core Configuration Manager, I get a login pup-up and if I put into it the credentials for daletest, I keep getting the login pop-up.

If Nagios cannont authenticate via a contact_group, please let me know. It is NOT the way I want it to work, but I can work (begrudgingly) around it.

This is getting to be a critical issue for me and I have a January 31 drop dead deadline.

Re: Controlling user access with ContactGroups

Posted: Wed Dec 16, 2015 8:53 am
by ChathamDaleJ
I will screenshot anything you wish. However, I added daletest as a contact_group to host and service and daletest cannot pull up CCM.

Re: Controlling user access with ContactGroups

Posted: Wed Dec 16, 2015 11:12 am
by ChathamDaleJ
It looks like the best thing to do may be to use a "contactgroup" template with the users defined. However, I think it is the intent of the Nagios gods that a contact_group should be able to edit configurations if things are checked the way I outlined.

Re: Controlling user access with ContactGroups

Posted: Wed Dec 16, 2015 2:38 pm
by ChathamDaleJ
Now I am confused.

Directly added user daletest to a host and all services on that host. Granted "can Reconfigure" and cann access advanced features. I thought that would give access to the CCM for that host and services.

What am I doing wrong?

Re: Controlling user access with ContactGroups

Posted: Wed Dec 16, 2015 2:49 pm
by ChathamDaleJ
OK, apparently I had my head in a dark place.

I have always used the CCM to configure hosts. It apperas that if you are not an admn, you have to go through the services display page in order to modify. Not the way I'd really like it to work, but I can see why it does work that way.

Please consider this item closed.

Thanks!

Dale

Re: Controlling user access with ContactGroups

Posted: Wed Dec 16, 2015 2:54 pm
by rkennedy
ChathamDaleJ wrote:OK, apparently I had my head in a dark place.

I have always used the CCM to configure hosts. It apperas that if you are not an admn, you have to go through the services display page in order to modify. Not the way I'd really like it to work, but I can see why it does work that way.

Please consider this item closed.

Thanks!

Dale
I actually had a post typed up right before you confirmed this, I went through and confirmed it is the Admin only priv. that allows access to CCM.

The feature request is for CCM to have it's own security setting, ID 7298.

I'll close this out now, but feel free to open a new thread if you ever need assistance in the future.