[hobbit] User management for Xymon?!

[Vernon Everett]

I created a "Business View" page, which had heaps of combo tests,
showing the status of applications, and the servers and databases they
depended on.
All the servers there were under group-except, where I took out all
stuff not related to the health of what the business cares about.
Check for group-only and group-except in the bb-hosts man page. (They
do pretty much the same thing in different ways)

Business couldn't give a toss if a disk in a RAID set is dead. Apps
still work, it's all green to them. Leave it out.
Memory usage is high? So what? Apps are running.
Disks? Only the ones business can do something about.
Ditto for CPU.

On the sysadmin view - off limits to PHBs - we had all the other stuff.
So if we got a call about a slow app, we could see it may be related
to a disk rebuild in a RAID set, or a high CPU utilisation, and react
accordingly.
But most of what we see on Xymon needs to be treated as "Need to know"
secrets, and business, for the most part do not need to know.

Simply create a "business view" page, and use your web server access
control to limit their access to that view only.

Cheers
   Vernon

2010/7/8 Neil Franken <nfranken at theunlimitedworld.co.za>:
> I have to agree that we need to investigate the need for such a system. On my xymon display I not only have 'system' tests like CPU but also business process tests.  I don’t want business to see the CPU consumption but would love to give them access to view the business processes status. Currently I can't which is not a train smash but it would be a nice to have.
>
>
> -----Original Message-----
> From: Maik Heinelt [mailto:maik at vegasystems.com]
> Sent: 08 July 2010 03:29 AM
> To: hobbit at hswn.dk
> Subject: Re: [hobbit] User management for Xymon?!
>
>  Thanks a lot!!
> It doesn't look that difficult!
> I will try that way!
>
> But anyway, I still think, this feature would be a great one in one of the next Xymon version!
>
> Maik
>
> Heinelt Maik
> Status: Software Developer
> ハイネルト　マイク
> 愛知県一宮市富士２−２−２２
> 株式会社 ベガシステムズ
> TEL ０５８６−７１−３９０３
> FAX ０５８６−７１−４０７１
> http://www.vegasystems.com
> Skype ID: daliose
>
> On 2010/07/08 10:24, Vernon Everett wrote:
>> Check this thread out.
>> http://www.hswn.dk/hobbiton/2008/05/msg00098.html
>> It's what I used as a basis for doing what I needed.
>>
>> You need a second hobbitserver.cfg and a second bb-hosts file, and it
>> will generate what you need in the specified directory.
>> Once it works, you can then add it as a menu option in the usual way.
>>
>> I wish I could offer you more, but I did not take copies of the
>> scripts when I left and it was a long time ago.
>>
>> Cheers
>>      Vernon
>>
>>
>> 2010/7/8 Vernon Everett <everett.vernon at gmail.com>:
>>> It can be done, but it's a bit of a hack, and requires running
>>> additional instances of some of the Xymon daemons.
>>> I have done it before in a previous contract, where we had separate
>>> Wintel and Unix divisions, so it made sense to have 2 different
>>> "non-green" views.
>>>
>>> I also means you have to maintain or generate additional sets of
>>> bb-hosts files, hobbitserver.cfg files and so forth.
>>> It's tricky, but not difficult.
>>> I was shown how to do it by a list member, so maybe they can repost
>>> the original email - or I can see if I can dig it up.
>>>
>>> Watch this space.
>>>
>>> Regards
>>>    Vernon
>>>
>>>
>>>
>>> On Thu, Jul 8, 2010 at 8:53 AM, Maik Heinelt <maik at vegasystems.com> wrote:
>>>>  Well, that's what I said.
>>>> I already use mod_auth_mysql to ahndle with user logins, but could
>>>> you please explain, how to manage the all non-green function just
>>>> for one folder?
>>>> This would be a nice feature, to make it possible, a user can see
>>>> only all non-green machines for his folder.
>>>>
>>>> I had the menu on Xymon only visible for local, just to avoid, a
>>>> standard user can click on the "Show all non-green" link in there.
>>>>
>>>>
>>>> Heinelt Maik
>>>> Status: Software Developer
>>>> ハイネルト　マイク
>>>> 愛知県一宮市富士２−２−２２
>>>> 株式会社 ベガシステムズ
>>>> TEL ０５８６−７１−３９０３
>>>> FAX ０５８６−７１−４０７１
>>>> http://www.vegasystems.com
>>>> Skype ID: daliose
>>>>
>>>> On 2010/07/08 9:40, Jerald Sheets wrote:
>>>>> Thing is, Maik, that there are so many options via Apache modules
>>>>> (LDAP, MySQL, etc.) and you can even connect right into your AD,
>>>>> that it seems there shouldn't be a huge amount of time with something of such an "add-on"
>>>>> feel about it.
>>>>>
>>>>> What I mean by that is, that Apache alone can make your life very
>>>>> simple with mod_auth_ldap, mod_auth_mysql, etc.  A few directives,
>>>>> point at the right database, and voila!  There are plenty of GUI
>>>>> clients already out there, and there are plenty of cool ways to
>>>>> handle User access/management, that I'd rather the dev team work on
>>>>> making Xymon do what it does best *even better*, and that's monitoring things.
>>>>>
>>>>> Maybe that can be in the roadmap at some point, but I'm just not
>>>>> sure I agree very strongly with you that this would be as pressing
>>>>> a need as some other things in the project.
>>>>>
>>>>> I'm willing to be shouted down on that, by the way.  Just my two cents...
>>>>>
>>>>>
>>>>> --J
>>>>>
>>>>>
>>>>> On Jul 7, 2010, at 7:26 PM, Maik Heinelt wrote:
>>>>>
>>>>>> As we are talking about new features/function for Xymon, I would
>>>>>> like to bring in one more idea.
>>>>>>
>>>>>> Cause we are monitoring several server from my companies costumer,
>>>>>> we have set several user for our costumer, to see their server status.
>>>>>> For this, we just use a simple .htaccess connected with a MySQL db.
>>>>>>
>>>>>> It would be very handy, if there would be such a user/permission
>>>>>> management in Xymon as default.
>>>>>>
>>>>>> Just to setup a new user and select the view/folder/sub-folder,
>>>>>> where the user has permissions to.
>>>>>>
>>>>>>
>>>>>> Maik
>>>>>>
>>>>>>
>>>>>>
>>>>>> To unsubscribe from the hobbit list, send an e-mail to
>>>>>> hobbit-unsubscribe at hswn.dk
>>>>> To unsubscribe from the hobbit list, send an e-mail to
>>>>> hobbit-unsubscribe at hswn.dk
>>>>>
>>>>>
>>>>
>>>> To unsubscribe from the hobbit list, send an e-mail to
>>>> hobbit-unsubscribe at hswn.dk
>>>>
>>>>
>> To unsubscribe from the hobbit list, send an e-mail to
>> hobbit-unsubscribe at hswn.dk
>>
>>
>
>
> To unsubscribe from the hobbit list, send an e-mail to
> hobbit-unsubscribe at hswn.dk
>
>
>