AD Authentication Not Working

[mrochelle]

We switched over to AD authentication and for the most part, it was a smooth transition on 3 of the 4 NagiosXI systems. I have one problem child that I have not been able to get to work after updating the component. I did not find any errors in the access_log or messages. When I have my network team to trace the data, it appears this particular system makes no attempt to reach the AD server and we have confirmed the network path. Any recommendations for things to check would be appreciated.
Thanks Marcus

profile.zip

[scottwilkerson]

To be clear what version of the component are you using?

Also, are you using AD certificates?
http://assets.nagios.com/downloads/nagi ... ponent.pdf

If using hostnames vs. IP's can the problem child resolve the hostname properly?

[mrochelle]

The component version is 0.3. We are not using AD certificates at this time, and the AD domain controllers are identified via IPs.

[mrochelle]

Some additional information. I added configuration manually to /etc/httpd/conf.d/nagiosxi.conf to force it to authenticate with AD as a test and it worked successfully. So our network and AD servers work appropriately. I returned the configuration back to normal and my problem returns. So my problem appears to be within my nagios server.

[scottwilkerson]

Can we verify this server has php-ldap

Code: Select all

yum list installed|grep php-ldap

[mrochelle]

yum list installed|grep php-ldap
php-ldap.x86_64 5.3.3-27.el6_5 @updates

[tmcdonald]

Are there any differences between the working and non-working servers that you can think of?

[mrochelle]

Fortunately, this is primarily my DR server, and a close replica of my main nagios server with the exception of a smaller memory and disk foot print. I've been comparing config files and everything seems to be identical to my main nagios server which works.

[tgriep]

I added configuration manually to /etc/httpd/conf.d/nagiosxi.conf to force it to authenticate with AD as a test and it worked successfully.

Could you provide this file so we can review it?

Could you run the following after changing the server to use AD Authentication and post the output back to the forum?

Code: Select all

tail --lines=200 /var/log/httpd/error_log
tail --lines=200 /var/log/httpd/ssl_error_log

[mrochelle]

Ok.
nagiosxi.conf file

nagiosxi.conf