Page 1 of 2
AD Authentication Not Working
Posted: Fri Feb 13, 2015 10:32 am
by mrochelle
We switched over to AD authentication and for the most part, it was a smooth transition on 3 of the 4 NagiosXI systems. I have one problem child that I have not been able to get to work after updating the component. I did not find any errors in the access_log or messages. When I have my network team to trace the data, it appears this particular system makes no attempt to reach the AD server and we have confirmed the network path. Any recommendations for things to check would be appreciated.
Thanks Marcus
profile.zip
Re: AD Authentication Not Working
Posted: Fri Feb 13, 2015 11:11 am
by scottwilkerson
To be clear what version of the component are you using?
Also, are you using AD certificates?
http://assets.nagios.com/downloads/nagi ... ponent.pdf
If using hostnames vs. IP's can the problem child resolve the hostname properly?
Re: AD Authentication Not Working
Posted: Fri Feb 13, 2015 11:16 am
by mrochelle
The component version is 0.3. We are not using AD certificates at this time, and the AD domain controllers are identified via IPs.
Re: AD Authentication Not Working
Posted: Fri Feb 13, 2015 12:06 pm
by mrochelle
Some additional information. I added configuration manually to /etc/httpd/conf.d/nagiosxi.conf to force it to authenticate with AD as a test and it worked successfully. So our network and AD servers work appropriately. I returned the configuration back to normal and my problem returns. So my problem appears to be within my nagios server.
Re: AD Authentication Not Working
Posted: Fri Feb 13, 2015 2:43 pm
by scottwilkerson
Can we verify this server has php-ldap
Re: AD Authentication Not Working
Posted: Fri Feb 13, 2015 2:47 pm
by mrochelle
yum list installed|grep php-ldap
php-ldap.x86_64 5.3.3-27.el6_5 @updates
Re: AD Authentication Not Working
Posted: Fri Feb 13, 2015 3:45 pm
by tmcdonald
Are there any differences between the working and non-working servers that you can think of?
Re: AD Authentication Not Working
Posted: Fri Feb 13, 2015 4:03 pm
by mrochelle
Fortunately, this is primarily my DR server, and a close replica of my main nagios server with the exception of a smaller memory and disk foot print. I've been comparing config files and everything seems to be identical to my main nagios server which works.
Re: AD Authentication Not Working
Posted: Mon Feb 16, 2015 10:34 am
by tgriep
I added configuration manually to /etc/httpd/conf.d/nagiosxi.conf to force it to authenticate with AD as a test and it worked successfully.
Could you provide this file so we can review it?
Could you run the following after changing the server to use AD Authentication and post the output back to the forum?
Code: Select all
tail --lines=200 /var/log/httpd/error_log
tail --lines=200 /var/log/httpd/ssl_error_log
Re: AD Authentication Not Working
Posted: Mon Feb 16, 2015 11:37 am
by mrochelle
Ok.
nagiosxi.conf file
nagiosxi.conf