NO.B.0010——>Manage hosts, users and permissions/host maintenance/openldap-based user authentication/user management permissions

1. Host and host group:
green -> enabled host
red -> disabled host
gray ->
a phrase under Templates/Applications//Templates/Templates

1. Create a host group:
Create 2 groups under Linux servers:
Configuration -> Host Group -> Create Host Group -> Linux servers/SNMP group, Linux servers/Test group

Add Atest host Another host to the host group
configuration -> host -> select the host to be added -> batch update -> add a new or existing host group -> select Test group

Host asset record:
Select the host -> fill in manually, automatically -> type (test) -> update
asset record -> host -> group () -> field (type) -> include (Test)——>Application——>Click the host name: (Picture 1)
Insert picture description here

                                                                       图一 

Experiment 1:
Create a monitoring item in A test host: (fill in the information obtained from the key value into the software application A)
Insert picture description here

How to automatically fill in the asset record:
Click A test host ——>Host Asset Record ——>Automatic (Picture 1) ——>Update——>Detection——>Latest Data (Picture 2)
Insert picture description here

                                                                        图一

Insert picture description hereInsert picture description here
Insert picture description hereInsert picture description here

                                                                       图二

2. Host maintenance
There are two types of host maintenance :
with data collection: during our maintenance period, item still collects data,
no data collection: during our maintenance period, host item no longer collects data

There is data collection:
Configuration -> Maintenance -> Create Maintenance Period -> Add Maintenance Information (Figure 1) -> Period (Figure 2) -> Host and Group (Figure 3) -> Test or normal collection data.
Insert picture description here

                                                                        图一

Insert picture description here

                                                                        图二

Insert picture description here

                                                                       图三

Insert picture description here

No data collection:
Configuration -> Maintenance -> Create Maintenance Period -> Maintenance (Picture 1) -> Period (Picture 2) -> Host and Group (Picture 3) -> Test cannot collect data normally.
Insert picture description here

                                                                        图一

Insert picture description here

                                                                        图二

Insert picture description here

                                                                        图三

There is no data execution result:
Insert picture description here

3. User authentication based on openldap
There are three ways of user authentication:
1. HTTP: Authentication based on httpd's internal authentication mechanism.
2. LDAP: Lightweight directory access protocol. I use openldap for centralized authentication management of accounts.
3. Internal: zabbix manages the user name and password by itself.

LDAP unified authentication management:
Management -> Authentication -> LDAP Settings -> Test (Picture 1) -> LDAP Authorization and Authentication (Picture 2) (open a new window in advance before this operation, in case you can't get in. Recover in time) -> Create user (Figure 3)
Insert picture description here

                                                                     图一

Insert picture description here

                                                                    图二

Insert picture description here

                                                                    图三

4. User management permissions:
There are three types of
users : users: only have the permissions of detection, asset records, and reports, and cannot see the hosts set by others.
Administrator: In addition to the three previous permissions of the user, there is also a
super administrator with configured permissions : permissions include administrator permissions and can have management permissions.
Management -> User -> Create User (Picture 1) -> Privilege (Picture 2) (User, Administrator, Super Administrator) (This is his accurate position for setting permissions)
Insert picture description here

                                                                        图一

Insert picture description here

                                                                         图二

Management -> User Group -> Create User Group (Picture 1) -> Permission (Picture 2)
Insert picture description here

                                                                        图一

Insert picture description hereInsert picture description here

                                                                               图二

If we want to give special permissions to a user, we need to add permissions to the user group, and then associate the user with the user group.

Guess you like

Origin blog.51cto.com/15005403/2552425