check ldap service through F5 balancer

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
Post Reply
nmarbue78
Posts: 1
Joined: Thu Jun 11, 2020 1:18 pm

check ldap service through F5 balancer

Post by nmarbue78 »

Hello, I have the following problem. I'm checking the ldap service on some openldap servers with the nagisoxi chek_ldap script. If I check directly to the openldap servers, I don't have any problems, as you can see in the script:


/check_ldap -H 5.5.5.5 -b 'ou=xxxxxxx,o=xxxxx' -D 'cn=xxxxxx,ou=xxxxxx,o=xxxxxxx' -w 3 -c 5 -P xxxxxxxxxxxx -3
LDAP OK - 0.006 seconds response time|time=0.005872s;3.000000;5.000000;0.000000

but if I do it through a balancer F5 VIP ip I can no longer contact my openldap servers, I have all the FW and allowed rules and if I telnet from nagiosxi to the balancer F5 VIP ip to port 389/tcp the telnet.the pulls and virtual server are ok and up in F5 and from nagios there is a ping to the VIP IPs of F5


Testing with F5 VIP IP:

./check_ldap -H 4.4.4.4 -b 'ou=xxxxxxx,o=xxxxxx' -D 'cn=xxxxxx,ou=xxxxxxxx,o=xxxxxxx' -w 3 -c 5 -P "xxxxxxxxxxxxxx" -3 -v
ldap_bind: Can't contact LDAP server (-1)
Could not bind to the LDAP server

I don't know why this happens if many users are authenticated in production going through F5 to openldap.

thank you very much to see if you can help me
Post Reply