Nagios Support Forum

1. The LDAP/AD authentication VIPs were updated by our LDAP administration team, the old one is still going ok, but we have to change it before one month.
2. I went to Administration -> LDAP / Active Directory Integration Configuration in Nagios XI, removed the old VIPs, and added the new ones. (Maygbe this is the problem, I deleted old object and created a new one instead of editing it and changing just the url where is pointing to)
3. After this change, I logged out and attempted to log in with an AD domain user, but I received a 500 error during the login process.
4. I was able to log in with the nagiosadmin account and went to User Management. I selected my AD user profile, clicked "Update user" button without making any changes manually (maybe, because there is a missing object in AD Server property, it takes the 1st available option and updates it in configuration), and then I was able to log in successfully with the AD account.

igae1 wrote: ↑Thu Sep 12, 2024 4:26 am Hello,

I recently encountered an issue after changing the VIPs for LDAP/Active Directory authentication in Nagios XI. Here's a summary of the steps I followed and the issue I'm facing:

1. The LDAP/AD authentication VIPs were updated by our LDAP administration team, the old one is still going ok, but we have to change it before one month.
2. I went to Administration -> LDAP / Active Directory Integration Configuration in Nagios XI, removed the old VIPs, and added the new ones. (Maygbe this is the problem, I deleted old object and created a new one instead of editing it and changing just the url where is pointing to)
3. After this change, I logged out and attempted to log in with an AD domain user, but I received a 500 error during the login process.
4. I was able to log in with the nagiosadmin account and went to User Management. I selected my AD user profile, clicked "Update user" button without making any changes manually (maybe, because there is a missing object in AD Server property, it takes the 1st available option and updates it in configuration), and then I was able to log in successfully with the AD account.

The issue is that it seems I have to manually perform this process for every LDAP/AD user in the system. Is there a way to avoid having to update each user individually? Did I miss a step in the configuration that would help synchronize users or resolve this issue for all users at once?

Any guidance or suggestions would be greatly appreciated.

Thanks in advance for your help.

Best regards,