Im trying to get Active Directory Integration for Nagios XI I have it working without ssl, but need to be able to use ssl.
I am sing the following doc to get this to work
http://assets.nagios.com/downloads/nagi ... ponent.pdf
When I try the obtain the cert I get
cd /etc/openldap/cacerts
openssl s_client -showcerts -connect XXX.XXX.XXX.XXX:636 > ldapsrv1.crt
depth=0
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0
verify error:num=27:certificate not trusted
verify return:1
depth=0
verify error:num=21:unable to verify the first certificate
verify return:1
If I look at the file there are a bunch of cets in the ldapsrv1.crt file
I did take the first cert in the file and complete the documentation processes but it didnt work
Now the AD servers are windows 2012 server
Red Hat Enterprise Linux Server release 5.8
Nagios XI 2012R2.9
Active Directory Integration for Nagios XI with SSL
-
sreinhardt
- -fno-stack-protector
- Posts: 4366
- Joined: Mon Nov 19, 2012 12:10 pm
Re: Active Directory Integration for Nagios XI with SSL
I believe there is a bug with the AD component specifically relating to ssl\tls. I have already created an internal test environment and sent a bug to the developers, however there has not been movement on it as of yet. (only a few days old though)
Nagios-Plugins maintainer exclusively, unless you have other C language bugs with open-source nagios projects, then I am happy to help! Please pm or use other communication to alert me to issues as I no longer track the forum.
Re: Active Directory Integration for Nagios XI with SSL
Ok thanks for the information about the issue
-
sreinhardt
- -fno-stack-protector
- Posts: 4366
- Joined: Mon Nov 19, 2012 12:10 pm
Re: Active Directory Integration for Nagios XI with SSL
You're welcome, I will post back once we have an update and hopefully a new component to test!
Nagios-Plugins maintainer exclusively, unless you have other C language bugs with open-source nagios projects, then I am happy to help! Please pm or use other communication to alert me to issues as I no longer track the forum.