Page 1 of 2
LDAP Integration
Posted: Tue May 22, 2012 10:02 am
by bdouglass
I'm running an eval install of the latest version of Nagios XI (2.4) and have been trying to incorporate LDAP authentication for defined users. Unfortunately, I'm not getting very far with this.
I created a user with a specific nagios xi password. I then configured the LDAP integration screen with the appropriate information for our environment. Finally, I checked the LDAP Enabled box. When I try to log in as that user, all I get is a blank screen (no error message). When monitoring network traffic, I don't see any communication between nagios xi and the LDAP server.
Do I need to do something else to enable LDAP?
Thanks,
Bill Douglass
AISD
Re: LDAP Integration
Posted: Tue May 22, 2012 10:16 am
by scottwilkerson
We have 2 different components for this, one is called "LDAP Authentication", the other is called "Active Directory Integration"
Which are you using? SSL or not?
Re: LDAP Integration
Posted: Tue May 22, 2012 10:22 am
by bdouglass
I'm using the LDAP Authentication component. Non-SSL (port 389).
Bill Douglass
AISD
Re: LDAP Integration
Posted: Tue May 22, 2012 10:23 am
by yancy
Are you using the LDAP Auth manager component?
assets.nagios.com/downloads/nagiosxi/components/ldapauth.zip
Be sure to define LDAP host using ldaps://
For example:
LDAP Host: ldaps://someldap.server.com
Re: LDAP Integration
Posted: Tue May 22, 2012 10:34 am
by bdouglass
I updated the config so the servername reads ldaps://servername.domain.org, and applied the config. Still no luck with logging in, and I still don't see any traffic on either port 389 or 636.
Bill Douglass
AISD
Re: LDAP Integration
Posted: Tue May 22, 2012 11:08 am
by scottwilkerson
bdouglass wrote:I'm using the LDAP Authentication component. Non-SSL (port 389).
Bill Douglass
AISD
actually if you are using Non-SSL you should just have the hostname in there.
If you are seeing NO traffic on port 389, you should look into possible firewall blocking.
Can you telnet from you XI server to the ldap server on port 389
or
Re: LDAP Integration
Posted: Tue May 22, 2012 1:41 pm
by bdouglass
Yes, I can telnet to the host LDAP port. I'm also doing several checks on the server, so I don't think a firewall is the issue. I've tried both SSL and plain LDAP.
This is on the virtual machine image d/l from the Nagios XI site, so it's a pretty standard setup. The main change is configuring the web interface for SSL.
I've attached the system profile below.
Thanks,
Bill Douglass
AISD
Re: LDAP Integration
Posted: Tue May 22, 2012 2:12 pm
by scottwilkerson
bdouglass wrote:all I get is a blank screen (no error message).
Can you check the httpd error_log to see if you are getting any errors there
Re: LDAP Integration
Posted: Tue May 22, 2012 2:27 pm
by bdouglass
Yes, there are multiple occurrences of the following error:
PHP Fatal error: Call to undefined function ldap_connect() in /usr/local/nagiosxi/html/includes/components/ldapauth/ldapauth.inc.php on line 256, referer:
https://nagiosxi.austinisd.org/nagiosxi ... php?logout
Do I need to reinstall something?
Bill Douglass
AISD
Re: LDAP Integration
Posted: Tue May 22, 2012 2:34 pm
by scottwilkerson
Look in your /etc/php.ini and verify you have the following, and uncommented
If you had to change it, you need to restart apache