AD integration

[benningtonr]

I installed the active Directory component, yet I still get the following error.

LDAP libraries not installed! To install them, log into the server, and run 'yum install php-ldap'.

But i get this when I follow the instructions:

[root@nagios ~]# yum install php-ldap
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
* base: mirror.ubiquityservers.com
* epel: mirror.cogentco.com
* extras: mirrors.advancedhosters.com
* rpmforge: mirror.rit.edu
* updates: mirrors.advancedhosters.com
Setting up Install Process
Package php-ldap-5.3.3-14.el6_3.i686 already installed and latest version
Nothing to do

[BanditBBS]

First time you tried it, was it installed already? If not, did you try restarting apache?

[benningtonr]

nope, restarting apache now, thanks

[benningtonr]

OK, restarted Apache, it accepted my settings, now for the 2 dollar question, i logged out and tried to log on using my active dir credentials, no good.
Is there something else that needs to be setup?

[BanditBBS]

Nope, as long as your settings are correct it should be using your AD password. One of the settings must be incorrect.

Code: Select all

Enabled - checked
Account Suffix - @domain.domain.com
base DN - dc=whatever,dc=whatever,dc=com
domain controllers - machine name or IP
Security - none

That's what my setup looks like, just with real information.

[BanditBBS]

Also, might be some security setting on the domain controller to allow anonymous lookup, I can't recall.

[benningtonr]

what decides who has what permissions or the ability to login?

[BanditBBS]

what decides who has what permissions or the ability to login?

Has to be a user setup in XI. Username in XI has to match a username in AD for it to work, otherwise, if AD is down or no user founf it reverts to use the XI password that user was setup with.

[benningtonr]

so if the same username and credentials are setup in nagios, what does it need ad for?

Just asking

[BanditBBS]

so if the same username and credentials are setup in nagios, what does it need ad for?

Just asking

You create a new user in XI and give it whatever password you want. The user never has to login with that password and just always uses their AD password. One less password for the user to have to remember.