I have successfully installed nagios, and it provides authentication through apache2 which contacts a kerberos authentication server to authenticate users.
Now, users are authenticated, but they don't have any authorization as authorization is configured on
cgi.cfg and I don't want to configure all my users one by one manually, or give all rights to each authenticated user.
I would like to know if groups can be set on the
cgi.cfg file (such as nagios_reader, with right to watch web interface, host and services status, and nagios_writer, with the ability to run external commands) instead of on the user, and if these groups can be extracted from LDAP.