FreeiPA LDAP Integration Not working

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
Locked
twalters2
Posts: 6
Joined: Wed Sep 06, 2017 10:08 am

FreeiPA LDAP Integration Not working

Post by twalters2 »

Hello,

We are deploying NagiosXI and having lots of trouble with integrating our internal LDAP. Things I have tried
long DN bind
Short dn bind
adding uid to the index.php
Different users with and with out elevated privileges.

It successfully authenticates through the UI but always returns 0 users for import. We use multiple apps internal that works fine with our ldap and I have used different query apps just to test the search ability of the domain which works everytime. We are using tls and I have imported the CA and DC cert. Im at a loss what is going on. Can someone please provide assistance
User avatar
cdienger
Support Tech
Posts: 5045
Joined: Tue Feb 07, 2017 11:26 am

Re: FreeiPA LDAP Integration Not working

Post by cdienger »

This could occur if there are multiple ldap naming contexts. To verify or troubleshoot other potential problems I'd like to get a tcpdump:

yum -y install tcpdump
tcpdump -s 0 -i any host LDAP_SERVER_IP -w ldaptest.pcap

Let this run while you click on the import link, login, and try to browse the directory. Please PM me the ldaptest.pcap as it can contain sensitive info.
As of May 25th, 2018, all communications with Nagios Enterprises and its employees are covered under our new Privacy Policy.
twalters2
Posts: 6
Joined: Wed Sep 06, 2017 10:08 am

Re: FreeiPA LDAP Integration Not working

Post by twalters2 »

I dont have access to send PM. See message. Also do I run this from the nagios server?

We are sorry, but you are not authorised to use this feature. You may have just registered here and may need to participate more to be able to use this feature.
dwhitfield
Former Nagios Staff
Posts: 4583
Joined: Wed Sep 21, 2016 10:29 am
Location: NoLo, Minneapolis, MN
Contact:

Re: FreeiPA LDAP Integration Not working

Post by dwhitfield »

You should be able to PM now that you have had your second post approved. Yes, run that command on the nagios server.
Locked