LDAP/AD Integrations

[sfarrell]

I am trying to add a CA Cert using the "Add Certificate" in the GUI. When I paste in the certificate information and click 'SUBMIT' I receive a 500 error in the logs and a pop up screen saying "Could not write to /certs".

Any suggestions on how to fix this issue?

[gwesterman]

Hi @sfarrell,

What distro are you on?

If on Ubuntu / Debian, try running these:

Code: Select all

chmod 0775 /etc/ldap/certs
chmod 0775 /etc/ldap/cacerts

else try these:

Code: Select all

chmod 0775 /etc/openldap/certs
chmod 0775 /etc/openldap/cacerts

Thank you!

[fertilecloaked]

This usually isn’t an LDAP/AD issue — it’s a permissions problem.

The GUI runs as the web server user (typically apache), and the error means it can’t write to the certs directory.

Things to check quickly:

Verify ownership and permissions on the certs directory (commonly something like /usr/local/nagioslogserver/www/certs):

Code: Select all

chown -R apache:apache /usr/local/nagioslogserver/www/certs
chmod 755 /usr/local/nagioslogserver/www/certs

Make sure the filesystem isn’t read-only and isn’t full.

If SELinux is enabled, temporarily test with:

Code: Select all

setenforce 0

If that fixes it, you’ll need proper SELinux context rules instead of leaving it disabled.

After fixing permissions/SELinux, try adding the cert again.