Can login to Nagios XI but not in NagVis (AD)

[fogier]

Yes, they went through the license pagina. I've watched it myself.
I've added the user manually using your command. They can login to NagiosXI en accept the license agreement.
Then, when they try to login to NagVis it doesn't work.

[scottwilkerson]

I thought they had already logged into XI in the past.

When they accept the license it is going to change the password to the one in XI.

it is AFTER the license acceptance this that you can manually change the file if the users don't exist...

[fogier]

So the steps are??

1) Login with User in NagiosXI en accept the license agreement;
2) Try to login to NagVis (that doesn't work);
3) Check htpasswd.users if user exists;
4) If not, then run command to add the user.

These are all Active Directory users. Does it matter what password I use when I run the command in step 4??

[scottwilkerson]

These are all Active Directory users. Does it matter what password I use when I run the command in step 4??

Yes. Nagvis isn't integraded with active directory, it is authenticating out of the htpasswd.users file.

[fogier]

One of the users that didn't work, just changed his password. Removed his user from NagiosXI and added it back. Voila! Login succesfull (also in NagVis).
Second user still doesn't work. I'm going to try the workarround mentioned above.

[lmiltchev]

Let us know if this worked for the second user as well. Thanks!

[fogier]

Made a mistake. After the first user changed his password again, de nagvis login failed again.
I now added him with the previously explained methode. Now it works.
I'm just curious if it still works after his password expires again.

[mguthrie]

Thread reopened as per your request. Can you outline where the issue is at this time?

[fogier]

We still have 2 users who can login to Nagios but not to NagVis.

The workarround suggested here was to manually add them to htpasswd.users using the command: htpasswd -b /usr/local/nagiosxi/etc/htpasswd.users <USERNAME> <PASSWORD>.

This worked temporarily. When the active directory password changed due to policy, the password inside htpasswd.users didn't change. Result: The user had the use his new (the correct one) password in Nagios, but when logging in to NagVis he must use his old password. They are not in sync anymore.

We want all users to have active directory authentication for Nagios AND NagVis.

[scottwilkerson]

Integrating LDAP authentication into Apache is beyond the scope of XI support, but this would likely be the best way to accomplish what you want.
http://httpd.apache.org/docs/2.0/mod/mod_auth_ldap.html

You would need to modify the relevant apache config files to use this authentication method instead of the htpasswd.users file.