"Fossies" - the Fresh Open Source Software Archive

Member "icinga-web-1.14.1/app/modules/Api/config/access.xml.in" (19 Dec 2017, 5251 Bytes) of package /linux/misc/old/icinga-web-1.14.1.tar.gz:


As a special service "Fossies" has tried to format the requested text file into HTML format (style: standard) with prefixed line numbers. Alternatively you can here view or download the uninterpreted source code file. See also the last Fossies "Diffs" side-by-side code changes report for "access.xml.in": 1.13.1_vs_1.14.0.

    1 <?xml version="1.0" encoding="UTF-8"?>
    2 <ae:configurations xmlns="http://icinga.org/api/config/parts/access/1.0" xmlns:ae="http://agavi.org/agavi/config/global/envelope/1.0">
    3     <ae:configuration>
    4 
    5         <!-- Document resources
    6 	    http://docs.icinga.org/latest/en/icinga-web-config.html#configweb-access -->
    7 
    8         <!-- Map your instances to hosts here -->
    9         <instances>
   10             <instance name="@api_cmd_instance@">localhost</instance>
   11 
   12             <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="@web_conf_dir@/access.xml" xpointer="xmlns(ae=http://agavi.org/agavi/config/global/envelope/1.0) xmlns(ac=http://icinga.org/api/config/parts/access/1.0) xpointer(//ae:configurations//ae:configuration/ac:instances/node())">
   13                 <xi:fallback></xi:fallback>
   14             </xi:include>
   15 
   16 
   17             <!-- include user configs statically -->
   18         </instances>
   19 
   20         <!--
   21             Default settings that will be set if useDefaults is true
   22         -->
   23         <defaults>
   24             <defaultHost>localhost</defaultHost>
   25             <access>
   26                 <!-- allowed to read to and from -->
   27                 <readwrite>
   28                     <folders>
   29                         <resource name="icinga_objects">@icinga_objects_dir@</resource>
   30                     </folders>
   31                     <files>
   32     <!--                <resource name="icinga_cfg">@icinga_cfg@</resource>-->
   33                     </files>
   34                 </readwrite>
   35                 <!-- allowed to be read from -->
   36                 <read>
   37                 </read>
   38                 <!-- allowed to be written to -->
   39                 <write>
   40                     <files>
   41                         <resource name="icinga_pipe">@api_cmd_file@</resource>
   42                     </files>
   43                 </write>
   44                 <!-- allowed to be executed -->
   45                 <execute>
   46                     <files>
   47                         <resource name="icinga_service">/etc/init.d/icinga</resource>
   48 
   49                         <resource name="icinga_bin">@icinga_bin@</resource>
   50                         <resource name="echo">/bin/echo</resource>
   51                         <resource name="printf">printf</resource>
   52                         <resource name="cp">/bin/cp</resource>
   53                         <resource name="ls">/bin/ls</resource>
   54                         <resource name="grep">/bin/grep</resource>
   55                     </files>
   56                 </execute>
   57             </access>
   58             <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="@web_conf_dir@/access.xml" xpointer="xmlns(ae=http://agavi.org/agavi/config/global/envelope/1.0) xmlns(ac=http://icinga.org/api/config/parts/access/1.0) xpointer(//ae:configurations//ae:configuration/ac:defaults/node())">
   59                 <xi:fallback></xi:fallback>
   60             </xi:include>
   61         </defaults>
   62 
   63 
   64         <!-- Hosts that can be accessed via the console interface -->
   65         <hosts>
   66             <host name="localhost">
   67                 <type>local</type>
   68                 <!-- Only allow access to these files, folders or executables -->
   69                 <access useDefaults="true">
   70                     <read>
   71                         <files>
   72                             <resource name="test">test</resource>
   73                         </files>
   74                     </read>
   75 
   76 
   77                 </access>
   78             </host>
   79 
   80             <!--  Example for ssh connection with user/password auth -->
   81             <host name="vm_host1">
   82                 <type>ssh</type>
   83                 <ssh-config>
   84                     <host>localhost</host>
   85                     <port>22</port>
   86                     <auth>
   87                         <type>password</type>
   88                         <user>testuser</user>
   89                         <password>test</password>
   90                     </auth>
   91                 </ssh-config>
   92 
   93                 <access useDefaults="true" />
   94 
   95             </host>
   96 
   97 
   98     <!--
   99               This is experimental, try to avoid password encrypted keyfiles when encountering errors
  100               Example for ssh connection with pubkey auth -->
  101     <!--
  102             <host name="vm_host2">
  103                 <type>ssh</type>
  104                 <ssh-config>
  105                     <host>localhost</ae:parameter>
  106                     <port>22</ae:parameter>
  107                     <auth>
  108                         <type>key</type>
  109                         <user>testuser</user>
  110                         <private-key>/usr/local/icinga-web/app/modules/Api/lib/.ssh/host1_rsa</private-key>
  111                         <password>secret123</password>
  112                     </auth>
  113                 </ssh-config>
  114 
  115 
  116                 <access useDefaults="true" />
  117             </host>
  118     -->
  119 
  120             <!-- include user configs statically -->
  121 
  122             <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="@web_conf_dir@/access.xml"
  123                     xpointer="xmlns(ae=http://agavi.org/agavi/config/global/envelope/1.0)
  124                     xmlns(ac=http://icinga.org/api/config/parts/access/1.0)
  125                      xpointer(//ae:configurations//ae:configuration/ac:hosts/node())">
  126                 <xi:fallback></xi:fallback>
  127             </xi:include>
  128         </hosts>
  129 
  130     </ae:configuration>
  131 </ae:configurations>