Page 1 of 1
Issue with new users seeing all hosts/services
Posted: Tue Oct 08, 2019 8:23 am
by kfox
We are trying to deploy a multi-tenancy on our Nagios XI server, but when we create a new user as a monitoring contact they can see all hosts and services automatically. I've made sure the "can see all hosts and services" option is not checked, the user is not an admin, and they are not part of any contact groups at this point. I've followed the documentation PDF for setting up multi-tenancy, but the lack of restriction on a brand new user is putting a damper on the whole point of feature. Any help on this would be appreciated.
Re: Issue with new users seeing all hosts/services
Posted: Tue Oct 08, 2019 8:28 am
by scottwilkerson
What all "Security Settings" do you have selected for these users? I'm trying to replicate this.
Re: Issue with new users seeing all hosts/services
Posted: Tue Oct 08, 2019 8:35 am
by kfox
Authroization leave: User
All the following check boxes are left blank.
CCM Access: None
I've tried setting the user to Read-only access, and that didn't have an affect on outcome.
I can create a new user, leave the monitoring contact check box empty, and the user won't see any services or hosts, as expected. It's as soon as I check the monitoring contact box that the user has access to see all the hosts and services.
Re: Issue with new users seeing all hosts/services
Posted: Tue Oct 08, 2019 9:02 am
by scottwilkerson
I just tested this and I do not see anything.
Are you sure you don't have a contact group that has the
* assigned to it?
This would pickup any new contacts
Code: Select all
grep '*' /usr/local/nagios/etc/contactgroups.cfg
Re: Issue with new users seeing all hosts/services
Posted: Tue Oct 08, 2019 9:28 am
by kfox
I ran the grep and it didn't return anything, so the * isn't the issue in this case. Are there any settings regarding the monitoring contact option that I could check?
Re: Issue with new users seeing all hosts/services
Posted: Tue Oct 08, 2019 10:17 am
by scottwilkerson
Could you send me a profile.zip from Admin -> System Profile along with the username of one of these users so I can investigate.
Thanks
Re: Issue with new users seeing all hosts/services
Posted: Wed Oct 09, 2019 11:32 am
by YakForger38
I don't know, it's strange, I followed the instructions in this thread and it turned out fine for me, new users can only see what I intend them to see...
Re: Issue with new users seeing all hosts/services
Posted: Wed Oct 09, 2019 11:36 am
by scottwilkerson
YakForger38 wrote:I don't know, it's strange, I followed the instructions in this thread and it turned out fine for me, new users can only see what I intend them to see...
In the PM we discovered that in fact the contact was added to a contact group. I'm sure this is what was causing the issue.
Locking thread