Page 1 of 1

Adding LDAP Certificates automatically

Posted: Tue May 04, 2021 8:54 am
by optionstechnology
I can add auth servers via the API easily enough

But I cant add the certificate

Is there any way to do this programmatically?


Also is there a way of setting other admin area settings - like system settings, email setttings, backups etc

Re: Adding LDAP Certificates automatically

Posted: Tue May 04, 2021 5:52 pm
by ssax
It's not currently possible to do that through the API. Does your automation tool have the ability to add files/run commands/restart services at the OS level? If so, what OS/version are you running?

Code: Select all

uname -a
cat /etc/*release

Re: Adding LDAP Certificates automatically

Posted: Thu May 06, 2021 4:09 am
by optionstechnology
Yeah we can change the config files directly and run commands/restart services

running centos 7.9

Re: Adding LDAP Certificates automatically

Posted: Thu May 06, 2021 5:23 pm
by ssax
You should be able to add the entire CA cert chain in individual pem format files into:

Code: Select all

/etc/pki/ca-trust/source/anchors/
Then run:

Code: Select all

update-ca-trust extract
systemctl restart httpd
If that doesn't work you should be able to put your entire CA certificate chain in pem encoded format in a file in:

Code: Select all

/etc/openldap/certs
I'm using /etc/openldap/certs/ca.pem in the example below.

Then run these commands against it:

Code: Select all

chown apache.nagios /etc/openldap/certs/ca.pem
echo 'TLS_CACERT /etc/openldap/certs/ca.pem' >> /etc/openldap/ldap.conf
systemctl restart httpd

Re: Adding LDAP Certificates automatically

Posted: Mon May 10, 2021 9:17 am
by optionstechnology
yup this worked perfectly, thanks

for the other settings-

We need to check: Allow HTML Tags in Host/Service Status

uncheck: Sticky Acknowledgement

change the "send from" address in mail settings

For backups check the 'Enable Local Backups' checkbox

Set it to run Daily at 18:00 to /store/backups/nagiosxi

Set a backup limit of 5


are all these things also possible by changing the settings in config files?

Re: Adding LDAP Certificates automatically

Posted: Mon May 10, 2021 4:50 pm
by ssax
Those are not currently modifiable like that because you need to be logged in to do it to pull the other information that is submitted with them.