Issue with LDAP integration

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
Locked
reincarne
Posts: 146
Joined: Wed Jun 26, 2013 4:39 am

Issue with LDAP integration

Post by reincarne »

Hi,
We've been trying to integrate Nagios XI with LDAP and failed.
First of all when trying to set up the LDAP server, we used only dc=DOMAIN,dc=COM as was described.
When providing the user name and password - it simply failed to connect. The only way it connected was by writing the full DN in the user name field:
uid:XXX,OU=people,DC=Domain,DC=com

Below is out LDAP setup, is it possible that its different from the way Nagios files are using the filters? It looks like it connects incorrectly as it cannot see the users in the group.

dn: uid=user1,ou=People,dc=FF,dc=net
objectClass: top
objectClass: account
objectClass: posixAccount
objectClass: shadowAccount
cn: user1
uid: user1
You do not have the required permissions to view the files attached to this post.
Last edited by reincarne on Tue Feb 06, 2018 10:14 am, edited 1 time in total.
User avatar
cdienger
Support Tech
Posts: 5045
Joined: Tue Feb 07, 2017 11:26 am

Re: Issue with LDAP integration

Post by cdienger »

It looks like you just need to add uid to the list of user objects as described in https://support.nagios.com/kb/article/a ... ation.html:

Code: Select all

$units = array('person', 'inetorgperson', 'organizationalperson', 'shadowaccount', 'posixaccount','uid');
Give this a shot and let us know how it goes.
As of May 25th, 2018, all communications with Nagios Enterprises and its employees are covered under our new Privacy Policy.
reincarne
Posts: 146
Joined: Wed Jun 26, 2013 4:39 am

Re: Issue with LDAP integration

Post by reincarne »

cdienger wrote:It looks like you just need to add uid to the list of user objects as described in https://support.nagios.com/kb/article/a ... ation.html:

Code: Select all

$units = array('person', 'inetorgperson', 'organizationalperson', 'shadowaccount', 'posixaccount','uid');
Give this a shot and let us know how it goes.
It did the trick, however when I select a group, instead of pulling all the users nested in this group, it converts the group into a user.
how can it be fixed?
scottwilkerson
DevOps Engineer
Posts: 19396
Joined: Tue Nov 15, 2011 3:11 pm
Location: Nagios Enterprises
Contact:

Re: Issue with LDAP integration

Post by scottwilkerson »

reincarne wrote:
cdienger wrote:It looks like you just need to add uid to the list of user objects as described in https://support.nagios.com/kb/article/a ... ation.html:

Code: Select all

$units = array('person', 'inetorgperson', 'organizationalperson', 'shadowaccount', 'posixaccount','uid');
Give this a shot and let us know how it goes.
It did the trick, however when I select a group, instead of pulling all the users nested in this group, it converts the group into a user.
how can it be fixed?
At present, the LDAP import does not create groups, it just imports individual users from the groups you have selected.
Former Nagios employee
Creator:
Human Design Website
Get Your Human Design Chart
reincarne
Posts: 146
Joined: Wed Jun 26, 2013 4:39 am

Re: Issue with LDAP integration

Post by reincarne »

Hi,
Is there any solution or till nothing? No way to solve it?
Nagios cannot pull the group users and simply create single users? We don't need to create a hroup in Nagios we simply need the ability to list the users in a group and create the single users, thats all.

For me its sounds a very simple code.
kyang

Re: Issue with LDAP integration

Post by kyang »

As of now, there is no solution for this.
At present, the LDAP import does not create groups, it just imports individual users from the groups you have selected.
It's still the same as scottwilkerson has mentioned.

There have been feature requests, but nothing set in motion as of now. A feature request may or may not be implemented, and that is entirely up to the devs.
reincarne
Posts: 146
Joined: Wed Jun 26, 2013 4:39 am

Re: Issue with LDAP integration

Post by reincarne »

kyang wrote:As of now, there is no solution for this.
At present, the LDAP import does not create groups, it just imports individual users from the groups you have selected.
It's still the same as scottwilkerson has mentioned.

There have been feature requests, but nothing set in motion as of now. A feature request may or may not be implemented, and that is entirely up to the devs.
This is the exact problem - Nagios does not see the groups. I want to import the users from these groups by Nagios doesn't see them :)
kyang

Re: Issue with LDAP integration

Post by kyang »

This is the exact problem - Nagios does not see the groups. I want to import the users from these groups by Nagios doesn't see them
Thanks! It goes back to there is a feature request for this and I can't give any ETA or even if it will be implemented.

I get what you mean, as importing by groups would be nice. It has been mentioned a few times. I would wait until after XI 5.5 is released to see if there are updates on this.
Locked