Page 1 of 1

Configuring Active Directory

Posted: Thu Jun 07, 2012 3:37 pm
by powersports
VMWare Image - Nagios XI 2011R2.4

I'm trying to setup Active Directory for our Nagios XI logins.
I changed the settings in the Active Directory Integration component, but I'm assuming that my users need to be mapped, or something along those lines.

Is there a document that might help me? I searched the Nagios Support for ldap and active directory, but neither returned any results.

Thanks

Re: Configuring Active Directory

Posted: Thu Jun 07, 2012 4:26 pm
by mguthrie
There's currently not a document for it, but you just need to have the AD users created in XI first, and then you can configure the AD component by accessing the Admin->Manage Components-> Active Directory (edit settings icon). You just need the information to bind to AD to compare credentials.

Re: Configuring Active Directory

Posted: Fri Jun 08, 2012 10:15 am
by powersports
Ok, so here is a brief overview.
Domain - mydomain.local
Domain Level - 2008R2

Domain User Information:
cn - Power Sports
sAMAccountName: powersports
userPrincipalName - [email protected]

Active Directory Settings (within Nagios)
Enable Active Directory Authentication: checked
Account Suffix: @mydomain.local
Base DN: OU=Users,OU=DomainAdmins,OU=Administrators,OU=All,DC=mydomain,DC=local
Domain Controllers: 10.0.0.58
Security: None

What do I need to make sure is setup within the Nagios user, and how does Nagios determine to use AD?

BTW - I am using AD/LDAP for other environments (EMC Unisphere), which I setup, and copied most of the settings from.
The Base DN: is the container where my powersports user is located. In my EMC Unisphere config I just have OU=All,DC=mydomain,DC=local, which I tried in Nagios but that also failed.

Thanks

Re: Configuring Active Directory

Posted: Fri Jun 08, 2012 1:50 pm
by mguthrie
Let create a running tail on the apache log. Run the following from the shell:

Code: Select all

tail -f /var/log/httpd/error_log
Once you've enabled the AD component, try logging out and logging into XI as an AD user (user also needs to exist in XI). Watch the error log and see if it gives and any errors related to the AD bind.

OH, also make sure you've got the php-ldap component installed.

Code: Select all

yum install -y php-ldap