GiNeR's Blog Голосов: 1 Адрес блога: http://maximum-value.blogspot.com/ Добавлен: 2008-02-19 12:37:50 блограйдером Lurk

Safe work around to make check_esxi_hardware.py work within normal user

2014-09-05 19:58:00 (читать в оригинале)

Adding nagios user to the root group (popular work around in the Internet) is a big security hole. I suggest never doing this.

Here is a better work around until VMware fixes 'CIM interaction' permission (which doesn't work at least since 4.0 and up to the recent 5.5):

1) Create a local user 'nagios' on a ESXi host
2) Add a cron job to check and update /etc/security/access.conf
3) Done!

Now you can use nagios user to check check_esxi_hardware.py, no special roles or permissions are needed.