Sevice & Host visibility configuration for additional users!

[Artem Ovdienko]

Hi guys,

I'm currently working on Nagios configuration for my company.
What I have now is distributed nagios setup using mod_gearman & livestatus for fast data access.

The thing is that I'm looking for mechanism on how to control user's visibility.
What exactly I need:

For example we have 100 hosts with 10 services on each, 10 of them should be monitored only by one department and only specific services.
nagiosadmin see all hosts and services.
departmentX see 10 hosts and able to view only 5 services.

---------------------
I have successfully tested and have been able to configure contact so see speceific services but in this case the contact can't see hosts.
Also I have been able to configure specific contact to see specific hosts but in this case the contact see all services assigned to the host at hand.

---------------------------
According to nagios support this is the logic of core and even their commercial product doesn't have flexible user management system.

Could some one guide me if I'm able to control this on Thruk level in any available way as filters cgi conf etc ?

[Sven Nierlein]

Hi Artem,

Thruk just uses filter to find out what a contact is able to see or not. Only overruled by global roles from the cgi.cfg.
Everything on this page: https://assets.nagios.com/downloads/nagioscore/docs/nagioscore/3/en/cgiauth.html is valid for
Thruk too.
Then Thruk has an additional option: use_strict_host_authorization
-> https://thruk.org/documentation/configuration.html#use_strict_host_authorization
This changes hosts contacts, so they cannot see services anymore unless they are service contacts as well. If you use
this option, make sure people cannot access the stock nagios gui or other guis, because they don't have such an option afaik.

Cheers,
Sven

[Artem Ovdienko]

Thank you Sven, 

Your answer really helped me to configure everything in the way i wanted. 
Save got, thruk has this functionality.
Now I'm able to control what each user seas in its monitor. 

P.S.
I don't even guess why nagios devs hasn't implemented simple user management on core level. :D

--
You received this message because you are subscribed to a topic in the Google Groups "Thruk" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/thruk/NRMDs5O57vQ/unsubscribe.
To unsubscribe from this group and all its topics, send an email to thruk+un...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.