Page 2 of 3
Re: Can login to Nagios XI but not in NagVis (AD)
Posted: Thu Jul 26, 2012 9:33 am
by fogier
Yes, they went through the license pagina. I've watched it myself.
I've added the user manually using your command. They can login to NagiosXI en accept the license agreement.
Then, when they try to login to NagVis it doesn't work.
Re: Can login to Nagios XI but not in NagVis (AD)
Posted: Thu Jul 26, 2012 12:04 pm
by scottwilkerson
I thought they had already logged into XI in the past.
When they accept the license it is going to change the password to the one in XI.
it is AFTER the license acceptance this that you can manually change the file if the users don't exist...
Re: Can login to Nagios XI but not in NagVis (AD)
Posted: Fri Jul 27, 2012 12:21 am
by fogier
So the steps are??
1) Login with User in NagiosXI en accept the license agreement;
2) Try to login to NagVis (that doesn't work);
3) Check htpasswd.users if user exists;
4) If not, then run command to add the user.
These are all Active Directory users. Does it matter what password I use when I run the command in step 4??
Re: Can login to Nagios XI but not in NagVis (AD)
Posted: Fri Jul 27, 2012 7:55 am
by scottwilkerson
fogier wrote:These are all Active Directory users. Does it matter what password I use when I run the command in step 4??
Yes. Nagvis isn't integraded with active directory, it is authenticating out of the htpasswd.users file.
Re: Can login to Nagios XI but not in NagVis (AD)
Posted: Tue Sep 18, 2012 1:10 am
by fogier
One of the users that didn't work, just changed his password. Removed his user from NagiosXI and added it back. Voila! Login succesfull (also in NagVis).
Second user still doesn't work. I'm going to try the workarround mentioned above.
Re: Can login to Nagios XI but not in NagVis (AD)
Posted: Tue Sep 18, 2012 9:31 am
by lmiltchev
Let us know if this worked for the second user as well. Thanks!
Re: Can login to Nagios XI but not in NagVis (AD)
Posted: Tue Oct 02, 2012 5:15 am
by fogier
Made a mistake. After the first user changed his password again, de nagvis login failed again.
I now added him with the previously explained methode. Now it works.
I'm just curious if it still works after his password expires again.
Re: Can login to Nagios XI but not in NagVis (AD)
Posted: Tue Oct 09, 2012 10:04 am
by mguthrie
Thread reopened as per your request. Can you outline where the issue is at this time?
Re: Can login to Nagios XI but not in NagVis (AD)
Posted: Wed Oct 10, 2012 12:06 am
by fogier
We still have 2 users who can login to Nagios but not to NagVis.
The workarround suggested here was to manually add them to htpasswd.users using the command: htpasswd -b /usr/local/nagiosxi/etc/htpasswd.users <USERNAME> <PASSWORD>.
This worked temporarily. When the active directory password changed due to policy, the password inside htpasswd.users didn't change. Result: The user had the use his new (the correct one) password in Nagios, but when logging in to NagVis he must use his old password. They are not in sync anymore.
We want all users to have active directory authentication for Nagios AND NagVis.
Re: Can login to Nagios XI but not in NagVis (AD)
Posted: Wed Oct 10, 2012 10:47 am
by scottwilkerson
Integrating LDAP authentication into Apache is beyond the scope of XI support, but this would likely be the best way to accomplish what you want.
http://httpd.apache.org/docs/2.0/mod/mod_auth_ldap.html
You would need to modify the relevant apache config files to use this authentication method instead of the htpasswd.users file.