Nagios Support Forum

Hi Guys,

Nagios Version: Nagios XI 2011R2.4
System: Centos 6.2 X86_64
Current Nagios user: 'nagiosadmin'

I want to be able to login via AD.

First I attempt to use the Active Directory plugin. My settings are in Bold below

Enables test authentication for Nagios XI.
Account Suffix: @netinfosys.local
The part of the full user identification after the username, such as @nagios.com.
Base DN: DC=netinfosys,DC=local
The LDAP-format starting object (distinguished name) that your users are defined below, such as DC=nagios,DC=com.
Domain Controllers: nis-dc01
A comma-separated list of domain controllers on your network.
Security: None
The type of security (if any) and port number to use for the connection to the domain controller.

I run "tail -f /var/log/httpd/error_log" before hitting 'apply'

The following is reported

[Wed Jun 27 13:43:02 2012] [error] [client 10.0.98.45] PHP Notice: Undefined variable: port in /usr/local/nagiosxi/html/includes/components/active_directory/active_directory.inc.php on line 252, referer: https://10.0.98.180/nagiosxi/admin/comp ... _directory

Now I try the second component called "LDAP Authentication"

LDAP Host: 10.0.98.2
The IP address of your LDAP host.
LDAP Port: 389 # confirmed this by testing via telnet
The port that your LDAP host is running on.
Base DN: DC=netinfosys,DC=local
The base DN to use for authenticating to and/or browsing the LDAP server.
User DN: cn=[USERNAME],cn=NIS,cn=Users
The user DN (fully distinguished name) that is used to check user authentication. Note: [USERNAME] will be automatically replaced with the user's username when they authenticate.

Now when I attempt to login with
username: lakrigg or netinfosys\lakrigg
password: domainpass

I receive

[Wed Jun 27 13:47:13 2012] [error] [client 10.0.98.45] PHP Warning: ldap_bind(): Unable to bind to server: Invalid credentials in /usr/local/nagiosxi/html/includes/components/ldapauth/ldapauth.inc.php on line 270, referer: https://10.0.98.180/nagiosxi/login.php

Can someone help with getting either of these 2 plugins working please?

Regards
Luke

Do you know if the LDAP server is using SSL?

Hi,

Thanks for reply, however I have got it going using the first plugin. Active Directory Plugin.

I was not aware that you had to create each of the AD users in NagiosXI before they could authenticate. This was unclear with the procedure as their are not many install notes for it.

The warning I was getting was just a php warning, so it worked after this.

Thanks
Luke

Glad to here it.

Yes you have to create each of the users on XI because the authorization is still done in XI even though the authentication is done in AD.