Active Directory Integration

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
Locked
autodsk
Posts: 3
Joined: Wed Jan 18, 2012 1:48 pm

Active Directory Integration

Post by autodsk »

Working on Active Directory Integration v0.3 in NagiosXI 2012R2.9 on my Centos 6.5 box.

I’ve gone through the instructions using default LDAP port 389 and have created a local user that is the same as my LDAP user.

I activated debugging in the logs using instructions from this Forum post: https://support.nagios.com/forum/viewto ... +directory

When I look in the http logs I see LDAP authentication. However, I am still denied login with the “Invalid Username or Password” box.

See the attached log snippet from the error log showing LDAP authentication information.

Thank you,
Jason
You do not have the required permissions to view the files attached to this post.
User avatar
Box293
Too Basu
Posts: 5126
Joined: Sun Feb 07, 2010 10:55 pm
Location: Deniliquin, Australia
Contact:

Re: Active Directory Integration

Post by Box293 »

So I was looking at this:

Code: Select all

res_errno: 49, res_error: <80090308: LdapErr: DSID-0C0903C8, comment: AcceptSecurityContext error, data 52e, v2580>, res_matched: <>
And after some googling I found this:
http://www-01.ibm.com/support/docview.w ... wg21290631

Code: Select all

52e 	invalid credentials 
Does your password for the user in AD contain any special characters? Any chance you could:
  • Change the password to something like Str0ng P@ssw0rd
    Logon to a windows machine to confirm the password has replicated to the DC's and works
    Log into XI with that user and password
Does this help?
As of May 25th, 2018, all communications with Nagios Enterprises and its employees are covered under our new Privacy Policy.
autodsk
Posts: 3
Joined: Wed Jan 18, 2012 1:48 pm

Re: Active Directory Integration

Post by autodsk »

Thank you for the reply. I tried a password change but it didn't help. I did figure out my problem.

ldapsearch was a good friend to me. :) It displayed the correct BaseDN and from there I figured out the correct Account Suffix. Finally, the correct username was not fname.lname as I expected.

Jason
User avatar
Box293
Too Basu
Posts: 5126
Joined: Sun Feb 07, 2010 10:55 pm
Location: Deniliquin, Australia
Contact:

Re: Active Directory Integration

Post by Box293 »

Excellent, thanks for posting back your solution as it will help others in the future.
As of May 25th, 2018, all communications with Nagios Enterprises and its employees are covered under our new Privacy Policy.
Locked