Enable "guest account" in Zabbix #13488
Labels
No labels
announcement
anubis
authentication
aws
backlog
blocked
bodhi
ci
cloud
communishift
copr
database
day-to-day
dc-move
deprecated
dev
discourse
dns
downloads
easyfix
epel
firmitas
forgejo_migration
Gain
High
Gain
Low
Gain
Medium
gitlab
greenwave
hardware
help wanted
high-trouble
koji
koschei
lists
low-trouble
medium-trouble
mirrorlists
monitoring
Needs investigation
odcs
OpenShift
ops
outage
packager_workflow_blocker
pagure
permissions
Priority
Needs Review
Priority
Next Meeting
Priority
🔥 URGENT 🔥
Priority
Waiting on Assignee
Priority
Waiting on External
Priority
Waiting on Reporter
rabbitmq
release-monitoring
releng
request-for-resources
s390x
security
SMTP
sprint-0
sprint-1
src.fp.o
staging
unfreeze
waiverdb
websites-general
wiki
Backlog Status
Needs Review
Backlog Status
Ready
chore
documentation
points
01
points
02
points
03
points
05
points
08
points
13
Priority
High
Priority
Low
Priority
Medium
Sprint Status
Blocked
Sprint Status
Done
Sprint Status
In Progress
Sprint Status
Review
Sprint Status
To Do
Technical Debt
Work Item
Bug
Work Item
Epic
Work Item
Spike
Work Item
Task
Work Item
User Story
No milestone
No project
No assignees
2 participants
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
infra/tickets#13488
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Description of request
It would be great to have 'anonymous' guest access configured for Zabbix. We have a few ways at Copr to propagate status checks to downstream monitoring tools, but getting it working again after our migration from Nagios to Zabbix is non-trivial. Generally speaking, having Nagios open was very convenient—anyone in the community could quickly check if something was broken without having to log in. It would be awesome if we could recreate that experience using documented guest access."
I'll take a look, last time I was looking at this, I think it was not possible.
However, also note that any FAS account can log in with guest permissions via the "SAML login" link on the login page, and I presume most community members will have a FAS account, so they can still check. I agree that's not the same as no-login, but it's pretty close ;)
The point is to have a naive way to forward statuses ... Considering there's an account
guestwith passwordguest, it's almost trivial to make our Red Hat grafana work again. Having a service account, doing SAML or so, is a bit more complicated way for the thing we need.I can probably re-enable the
guestinternal account, if that's sufficient? There's a Zabbix plugin for Grafana I believe, so then you'd be able to hook it up with guest access?Heh, not sure what is "internal account"? It may be sufficient, but dunno. Not sure I have enough spare cycles to work with the zabbix plugin for grafana, well ... I'd just use the previous mechanism to re-enable our metrics.
"Internal" just means local auth, not FAS. So a basic username & password. If that gives you want you need, I'm OK with enabling that.
Originally I thought we could have a "generally known" user auth (like
guestuser, with passwordguest), for any random user (seems like worth documenting for a general passerby). But if you want to generate one user/pass pair specificially for us, I don't object.well it will be a generic user, but it's all a bit arbitrary because everyone has guest access via FAS anyway 😁
I'll ping you with login details separately.
Seems to work, closing this :)