Xymon Mailing List Archive search

restricting access to hobbit

list Phil Wild
Fri, 16 Nov 2007 00:11:37 +0900
Message-Id: <user-dd0dfdab1183@xymon.invalid>

No, not quite, I want to make a single hobbit install work for two groups of
users, and I don't want group A to have any access to see or do anything to
Group B hosts and vice versa.

I am tryingto find out if there is a way of restricting the
reports/tools/executables to only run against a subset of the hosts defined
in bbhosts say like using bbgrep to filter on a tag or something for all
functions.

Any ideas?

Phil

On 16/11/2007, Josh Luthman <user-4c45a83f15cb@xymon.invalid> wrote:
The default Apache configuration that Hobbit makes for you will specify
requiring HTTP logins for the cgisec directory. Is this what you're looking
for?

On 11/14/07, Phil Wild <user-e365c1418192@xymon.invalid> wrote:
Hello,

I am looking at setting up hobbit to manage two groups of hosts. I would
prefer to just deploy one hobbit installation for both groups. For most of
the hobbit web pages, Apache security solves a lot of the browsing issues
but the cgi-bin executables and menus are the problem.

I want to make sure one group don't have access to see or make changes
to the other groups hosts.

The areas I see a problem with are:

hobbit-enadis.sh
bb-findhost.sh
hobbit-confreport.sh

I would like to restrict the above to only work with a subset of hosts
(perhaps a tag in the bbhosts file)

The reports generate web pages on the fly and drop the user at the top
level page which is not what I would prefer (each group have their own top
level page etc.)

All nongreen view is also an issue

and lastly, manually modifying the URL based on bb-hostsvc.sh to get to
a web page for a host in the other groups list is also a problem.

Any ideas how I can address this?

Thanks

Phil
--
Josh Luthman
Office: XXX-XXX-XXXX
Direct: XXX-XXX-XXXX
XXXX Wayne St
Suite XXXX
Troy, OH XXXXX

Those who don't understand UNIX are condemned to reinvent it, poorly.
--- Henry Spencer

-- 
Tel: XXXX XXX XXX
Fax: XXXX XXX XXX
email: user-e365c1418192@xymon.invalid