nagios: Enable the Nagios commands feature.

This allows us to in particular reschedule a Nagios check to run
immediately, which I've in the past found super useful when trying to
figure out whether we actually fixed a problem.

Unfortunately, Nagios config sucks and there's no easy way to create a
group containing all of us as people able to issue commands; you have
to list them in like 8 different places.

(imported from commit 2c1e53330eff1e47e09d0b1917136f101d64e86a)

servers/puppet/files/nagios3/cgi.cfg

@@ -88,7 +88,7 @@ nagios_check_command=/usr/lib/nagios/plugins/check_nagios /var/cache/nagios3/sta
 # authentication (bad idea), while any other value will make them
 # use the authentication functions (the default).
 
-use_authentication=0
+use_authentication=1
 
 
 

servers/puppet/files/nagios3/nagios.cfg

@@ -142,7 +142,7 @@ nagios_group=nagios
 # you will have to enable this.
 # Values: 0 = disable commands, 1 = enable commands
 
-check_external_commands=0
+check_external_commands=1
 
 
 

servers/puppet/manifests/site.pp

@@ -318,6 +318,16 @@ class humbug_nagios {
     ensure => present,
   }
   #TODO: Need to install our Nagios config
+  #
+  # Also need to run this sequence to enable commands to set the
+  # permissions for using the Nagios commands feature
+  #
+  # /etc/init.d/nagios3 stop
+  # dpkg-statoverride --update --add nagios www-data 2710 /var/lib/nagios3/rw
+  # dpkg-statoverride --update --add nagios nagios 751 /var/lib/nagios3
+  # /etc/init.d/nagios3 start
+  #
+  #
 }
 
 class humbug_zmirror {