[dev.icinga.com #13171] More examples for authentication.ini conf

[icinga-migration]

This issue has been migrated from Redmine: https://dev.icinga.com/issues/13171

Created by darmagan on 2016-11-11 15:24:49 +00:00

Assignee: darmagan
Status: Feedback
Target Version: (none)
Last Update: 2017-01-03 14:07:08 +00:00 (in Redmine)

---

Hi,

in the last part of the docs about filter expressions more examples would be helpful.
Docs: https://github.com/Icinga/icingaweb2/blob/master/doc/06-Security.md

In the last part of the hostgroups example

@
[unix-server]
groups = "unix-admins"
monitoring/filter/objects = "(hostgroup_name=bsd-servers|hostgroup_name=linux-servers)"
@

it's not clear that the expression has the same effect as a AND-Clause(If a AND expression is been searched).

Regards

[icinga-migration]

Updated by jmeyer on 2016-11-14 08:19:40 +00:00

• Status changed from New to Feedback
• Assigned to set to darmagan

darmagan wrote:

it's not clear that the expression has the same effect as a AND-Clause(If a AND expression is been searched).

Hi Deniz,

what exactly do you mean? (hostgroup_name=bsd-servers&hostgroup_name=linux-servers) has a completely different effect.

[icinga-migration]

Updated by jmeyer on 2016-11-14 08:19:47 +00:00

• Category changed from Authentication & Authorization to Documentation

[icinga-migration]

Updated by darmagan on 2017-01-03 14:07:08 +00:00

Hi,

if we implement the example from the docs for host_name, like:
host_name=bsd-servers|host_name=linux-servers

The effect is not what the User expects, example:
host_name=bsd-servers&host_name=linux-servers #all objects are restricted, cause such a object can not exist

host_name=bsd-servers|host_name=linux-servers #show host bsd_servers or host linux_servers

The user will most likely use the first example, if he wants to show host bsd_servers "and" host linux_servers(The second example has the effect the user wants - it's just a wrong interpretation). That should be cleared. So we just need an example for the AND-Clause, too.