Page 1 of 1

Active Directory Integration

Posted: Mon Aug 17, 2015 5:36 pm
by autodsk
Working on Active Directory Integration v0.3 in NagiosXI 2012R2.9 on my Centos 6.5 box.

I’ve gone through the instructions using default LDAP port 389 and have created a local user that is the same as my LDAP user.

I activated debugging in the logs using instructions from this Forum post: https://support.nagios.com/forum/viewto ... +directory

When I look in the http logs I see LDAP authentication. However, I am still denied login with the “Invalid Username or Password” box.

See the attached log snippet from the error log showing LDAP authentication information.

Thank you,
Jason

Re: Active Directory Integration

Posted: Mon Aug 17, 2015 6:22 pm
by Box293
So I was looking at this:

Code: Select all

res_errno: 49, res_error: <80090308: LdapErr: DSID-0C0903C8, comment: AcceptSecurityContext error, data 52e, v2580>, res_matched: <>
And after some googling I found this:
http://www-01.ibm.com/support/docview.w ... wg21290631

Code: Select all

52e 	invalid credentials 
Does your password for the user in AD contain any special characters? Any chance you could:
  • Change the password to something like Str0ng P@ssw0rd
    Logon to a windows machine to confirm the password has replicated to the DC's and works
    Log into XI with that user and password
Does this help?

Re: Active Directory Integration

Posted: Tue Aug 18, 2015 6:44 pm
by autodsk
Thank you for the reply. I tried a password change but it didn't help. I did figure out my problem.

ldapsearch was a good friend to me. :) It displayed the correct BaseDN and from there I figured out the correct Account Suffix. Finally, the correct username was not fname.lname as I expected.

Jason

Re: Active Directory Integration

Posted: Tue Aug 18, 2015 7:04 pm
by Box293
Excellent, thanks for posting back your solution as it will help others in the future.