LDAP Component

[jpipitone]

I've configured our LDAP component, and modified the UserDN to point to a particular IT OU in Active Directory.

My php_error log shows that the ldap component says the following:

Code: Select all

Unable to bind to server: Invalid credentials in /usr/local/nagiosxi/html/includes/components/ldapauth/ldapauth.inc.php on line 270

I couldn't find any docs for the LDAP component, so I'm unsure as far as how to pass a password to our DC's in order to authenticate properly.

Here's what the config looks like:

BaseDN:

Code: Select all

OU=Users,OU=IT,DC=domain,DC=com

UserDN:

Code: Select all

CN=[USERNAME],CN=Users,DC=domain,DC=com

Joe

-Linux Distribution and version:
32 bit CentOS

-Manual Install of XI

- No SSL

[rdedon]

This may be an issue with php-ldap not being installed as I saw a similar (albeit not password related) issue here:

http://support.nagios.com/forum/viewtop ... f=6&t=1939

[jpipitone]

I have php-ldap installed

[tonyyarusso]

We've had some people report that sometimes the LDAP Component will not work while the AD one does, and vice versa. Would you mind humouring me and giving this one a try? http://exchange.nagios.org/directory/Ad ... XI/details

[jpipitone]

That one works great! Only drawback is that the account has to have already been created in NagiosXI.

thank you

[tonyyarusso]

Excellent! Yeah, one of these days I want to make it able to automatically create accounts and some other fancy stuff, but that will have to wait for a few other things to be finished first.

[jpipitone]

This solution works out perfectly for us, we'd rather keep it somewhat locked down rather than just letting anyone log in within our company - thank you!

Joe

[rdedon]

Excellent! Just post again if you have any issues or questions.

[awoodewh]

Is it correct that it does not work with the Core Configuration Manager. It would log into the inital NagiosXI login, but not CCM (for me).

[tonyyarusso]

I believe that is a known issue, yes. We'd like to extend the functionality of these components at some point, but don't have a particular timeline for those sorts of things.