[Check_mk (english)] Multisite without replication - users can't see not-managed hosts

[Simone Zucchi]

Hello everybody,

I'm trying to achieve a "simple" task.

I've got 2 separate master-slave distributed monitoring infrastructure.

First (AAA from now on) instance uses CMK Raw 1.4.0p22

Second (BBB from now on) instance uses CMK Raw 1.2.8p14

I'd need the AAA master instance to show the alarms from all the BBB slave
instances but without any replication whatsoever.

I've been able to achieve this and now I can see hosts and services from
all the BBB slave instances from my AAA master instance BUT I can't figure
out how to make the visible to users other than cmkadmin (Administrator).

Actually my AAA master has both local users and users coming from different
Active Directory connections. Some users are part of specific groups and
must see specific hosts/services (and should not see any other than that).
To achieve this I've set up all the corresponding contactgroups=>hostgroups
and contactgroups=>services associations and the parameter
*service_authorization=strict* in mk-livestatus.cfg.

To sum up: I can't figure out how to tell CMK to let some users see some
hosts coming from BBB slave instances since these hosts are not handled by
my AAA master and I can't make any rule on them.

Is there a way to force this?

Thanks,

Simone