Nagios XI integration with Google Enterprise LDAP?

[naggyohs]

Hiya,

I've recently configured an LDAP service in Google Enterprise but can't seem to get it to work...Has anyone had success with this? I've attached a screenshot of my settings (with the domain switched to example.com).

Screenshot 2024-04-26 at 2.26.17 PM.png

Whenever I go to import/add users via LDAP I have tried logging in with my Google creds as well as the LDAP access creds I generated in Google but I only get 'Invalid Username'... I've configured the LDAP service to have full read access to everything.

Any ideas? Am I doing something wrong here?

(Latest version of Nagios - 2024R1.1.2 - on ubuntu 22.04 (x86_64) )

(I've also enabled debugging:

ldap_sasl_bind_s
ldap_sasl_bind
ldap_send_initial_request
ldap_new_connection 1 1 0
ldap_int_open_connection
ldap_connect_to_host: TCP ldap.google.com:636
ldap_new_socket: 18
ldap_prepare_socket: 18
ldap_connect_to_host: Trying 216.239.32.58:636
ldap_pvt_connect: fd: 18 tm: -1 async: 0
attempting to connect:
connect success
TLS: loaded 2 CA certificates from directory `/etc/ldap/cacerts'.
ldap_open_defconn: successful
ldap_send_server_request
ldap_result ld 0x563adee78930 msgid 1
wait4msg ld 0x563adee78930 msgid 1 (infinite timeout)
wait4msg continue ld 0x563adee78930 msgid 1 all 1
** ld 0x563adee78930 Connections:
* host: ldap.google.com port: 636 (default)
* from: IP=169.60.232.190:40624
refcnt: 2 status: Connected
last used: Fri Apr 26 19:34:31 2024


** ld 0x563adee78930 Outstanding Requests:
* msgid 1, origid 1, status InProgress
outstanding referrals 0, parent count 0
ld 0x563adee78930 request count 1 (abandoned 0)
** ld 0x563adee78930 Response Queue:
Empty
ld 0x563adee78930 response count 0
ldap_chkResponseList ld 0x563adee78930 msgid 1 all 1
ldap_chkResponseList returns ld 0x563adee78930 NULL
ldap_int_select
read1msg: ld 0x563adee78930 msgid 1 all 1
wait4msg continue ld 0x563adee78930 msgid 1 all 1
** ld 0x563adee78930 Connections:
* host: ldap.google.com port: 636 (default)
* from: IP=169.60.232.190:40624
refcnt: 2 status: Connected
last used: Fri Apr 26 19:34:31 2024


** ld 0x563adee78930 Outstanding Requests:
* msgid 1, origid 1, status InProgress
outstanding referrals 0, parent count 0
ld 0x563adee78930 request count 1 (abandoned 0)
** ld 0x563adee78930 Response Queue:
Empty
ld 0x563adee78930 response count 0
ldap_chkResponseList ld 0x563adee78930 msgid 1 all 1
ldap_chkResponseList returns ld 0x563adee78930 NULL
ldap_int_select
read1msg: ld 0x563adee78930 msgid 1 all 1
ldap_find_request_by_msgid: msgid 1, lr 0x563adf203cf0 lr->lr_refcnt = 1
read1msg: ld 0x563adee78930 msgid 1 message type bind
read1msg: ld 0x563adee78930 0 new referrals
read1msg: mark request completed, ld 0x563adee78930 msgid 1
request done: ld 0x563adee78930 msgid 1
res_errno: 32, res_error: <Invalid username>, res_matched: <>
ldap_return_request: lrx 0x563adf203cf0, lr 0x563adf203cf0
ldap_return_request: lrx->lr_msgid 1, lrx->lr_refcnt is now 0, lr is still present
ldap_free_request (origid 1, msgid 1)
ldap_free_request_int: lr 0x563adf203cf0 msgid 1 removed
ldap_do_free_request: asked to free lr 0x563adf203cf0 msgid 1 refcnt 0
ldap_parse_result
ldap_msgfree
ldap_err2string
ldap_free_connection 1 1
ldap_send_unbind
ldap_free_connection: actually freed

[danderson]

Thanks for reaching out @naggyohs,

Are you using the credentials for the google account or are you using the access credentials that you generated?

Here's docs on generating credentials:
https://support.google.com/a/answer/904 ... cess-codes