Page 1 of 1

Issue with LDAP integration

Posted: Sun Aug 06, 2017 8:45 am
by reincarne
Hi,
We've been trying to integrate Nagios XI with LDAP and failed.
First of all when trying to set up the LDAP server, we used only dc=DOMAIN,dc=COM as was described.
When providing the user name and password - it simply failed to connect. The only way it connected was by writing the full DN in the user name field:
uid:XXX,OU=people,DC=Domain,DC=com

Below is out LDAP setup, is it possible that its different from the way Nagios files are using the filters? It looks like it connects incorrectly as it cannot see the users in the group.

dn: uid=user1,ou=People,dc=FF,dc=net
objectClass: top
objectClass: account
objectClass: posixAccount
objectClass: shadowAccount
cn: user1
uid: user1

Re: Issue with LDAP integration

Posted: Mon Aug 07, 2017 11:39 am
by cdienger
It looks like you just need to add uid to the list of user objects as described in https://support.nagios.com/kb/article/a ... ation.html:

Code: Select all

$units = array('person', 'inetorgperson', 'organizationalperson', 'shadowaccount', 'posixaccount','uid');
Give this a shot and let us know how it goes.

Re: Issue with LDAP integration

Posted: Wed Sep 06, 2017 6:44 am
by reincarne
cdienger wrote:It looks like you just need to add uid to the list of user objects as described in https://support.nagios.com/kb/article/a ... ation.html:

Code: Select all

$units = array('person', 'inetorgperson', 'organizationalperson', 'shadowaccount', 'posixaccount','uid');
Give this a shot and let us know how it goes.
It did the trick, however when I select a group, instead of pulling all the users nested in this group, it converts the group into a user.
how can it be fixed?

Re: Issue with LDAP integration

Posted: Wed Sep 06, 2017 8:51 am
by scottwilkerson
reincarne wrote:
cdienger wrote:It looks like you just need to add uid to the list of user objects as described in https://support.nagios.com/kb/article/a ... ation.html:

Code: Select all

$units = array('person', 'inetorgperson', 'organizationalperson', 'shadowaccount', 'posixaccount','uid');
Give this a shot and let us know how it goes.
It did the trick, however when I select a group, instead of pulling all the users nested in this group, it converts the group into a user.
how can it be fixed?
At present, the LDAP import does not create groups, it just imports individual users from the groups you have selected.

Re: Issue with LDAP integration

Posted: Tue Feb 06, 2018 10:14 am
by reincarne
Hi,
Is there any solution or till nothing? No way to solve it?
Nagios cannot pull the group users and simply create single users? We don't need to create a hroup in Nagios we simply need the ability to list the users in a group and create the single users, thats all.

For me its sounds a very simple code.

Re: Issue with LDAP integration

Posted: Tue Feb 06, 2018 11:38 am
by kyang
As of now, there is no solution for this.
At present, the LDAP import does not create groups, it just imports individual users from the groups you have selected.
It's still the same as scottwilkerson has mentioned.

There have been feature requests, but nothing set in motion as of now. A feature request may or may not be implemented, and that is entirely up to the devs.

Re: Issue with LDAP integration

Posted: Wed Feb 07, 2018 3:01 am
by reincarne
kyang wrote:As of now, there is no solution for this.
At present, the LDAP import does not create groups, it just imports individual users from the groups you have selected.
It's still the same as scottwilkerson has mentioned.

There have been feature requests, but nothing set in motion as of now. A feature request may or may not be implemented, and that is entirely up to the devs.
This is the exact problem - Nagios does not see the groups. I want to import the users from these groups by Nagios doesn't see them :)

Re: Issue with LDAP integration

Posted: Wed Feb 07, 2018 10:41 am
by kyang
This is the exact problem - Nagios does not see the groups. I want to import the users from these groups by Nagios doesn't see them
Thanks! It goes back to there is a feature request for this and I can't give any ETA or even if it will be implemented.

I get what you mean, as importing by groups would be nice. It has been mentioned a few times. I would wait until after XI 5.5 is released to see if there are updates on this.