[icinga-users] adding nagios user to icingaweb2 group

Václav Mach machv at cesnet.cz
Tue Jul 31 09:14:57 CEST 2018


i've setup several check plugins to use icingacli. It's very fast and 
easy way to get current state of monitored services and hosts. The 
problem was that the nagios user, under which check were run, did not 
have access to /etc/icingaweb2, so icingacli did not work at all.

I found out, that this can be solved by adding user nagios to icingaweb2 
group by: 'usermod -a -G icingaweb2 nagios'. (It is also mentioned here 
https://github.com/Icinga/icingaweb2-module-director/issues/952 ). After 
this modification, all the check plugins work just fine, but i am not 
sure, if this is not a potential security risk.

Any thoughts on this?

Václav Mach
tel: +420 234 680 206
CESNET, z.s.p.o.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3710 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.icinga.org/pipermail/icinga-users/attachments/20180731/c88383f4/attachment.bin>

More information about the icinga-users mailing list