tyler.durden
/
icinga2
mirror of https://github.com/Icinga/icinga2.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #7074 from Icinga/feature/cli-run-as-icinga-not-root 

Impersonate as Icinga user, not root
This commit is contained in:
Michael Friedrich 2019-04-03 09:52:08 +02:00 committed by GitHub
parent c2f180395a 7174dcd265
commit c6eaee611c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
6 changed files with 22 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
doc/16-upgrading-icinga-2.md
View File

@ -67,6 +67,23 @@ The [IdoMysqlConnection](09-object-types.md#objecttype-idomysqlconnection) and [
objects provide a new attribute named `last_failover` which shows the last failover timestamp.
This value also is available in the [ido](10-icinga-template-library.md#itl-icinga-ido) CheckCommand output.
### CLI Commands <a id="upgrading-to-2-11-cli-commands"></a>
CLI commands such as `api setup`, `node wizard/setup`, `feature enable/disable/list`
required root permissions previously. Since the file permissions allow
the Icinga user to change things already, and users kept asking to
run Icinga on their own webspace without root permissions, this is now possible
with 2.11.
If you are running the commands with a different user than the
compiled `ICINGA_USER` and `ICINGA_GROUP` CMake settings (`icinga` everywhere,
except Debian with `nagios` for historical reasons`), ensure that this
user has the capabilities to change to a different user.
If you still encounter problems, run the aforementioned CLI commands as root,
or with sudo.
## Upgrading to v2.10 <a id="upgrading-to-2-10"></a>
### Path Constant Changes <a id="upgrading-to-2-10-path-constant-changes"></a>

2
lib/cli/apisetupcommand.cpp
View File

@ -24,7 +24,7 @@ String ApiSetupCommand::GetShortDescription() const
ImpersonationLevel ApiSetupCommand::GetImpersonationLevel() const
{
return ImpersonateRoot;
return ImpersonateIcinga;
}
int ApiSetupCommand::GetMaxArguments() const

2
lib/cli/featuredisablecommand.cpp
View File

@ -36,7 +36,7 @@ int FeatureDisableCommand::GetMaxArguments() const
ImpersonationLevel FeatureDisableCommand::GetImpersonationLevel() const
{
return ImpersonateRoot;
return ImpersonateIcinga;
}
/**

2
lib/cli/featureenablecommand.cpp
View File

@ -36,7 +36,7 @@ int FeatureEnableCommand::GetMaxArguments() const
ImpersonationLevel FeatureEnableCommand::GetImpersonationLevel() const
{
return ImpersonateRoot;
return ImpersonateIcinga;
}
/**

2
lib/cli/nodesetupcommand.cpp
View File

@ -71,7 +71,7 @@ std::vector<String> NodeSetupCommand::GetArgumentSuggestions(const String& argum
ImpersonationLevel NodeSetupCommand::GetImpersonationLevel() const
{
return ImpersonateRoot;
return ImpersonateIcinga;
}
/**

2
lib/cli/nodewizardcommand.cpp
View File

@ -37,7 +37,7 @@ String NodeWizardCommand::GetShortDescription() const
ImpersonationLevel NodeWizardCommand::GetImpersonationLevel() const
{
return ImpersonateRoot;
return ImpersonateIcinga;
}
int NodeWizardCommand::GetMaxArguments() const