Page 1 of 2

AD integration

Posted: Wed Dec 19, 2012 11:51 am
by benningtonr
I installed the active Directory component, yet I still get the following error.

LDAP libraries not installed! To install them, log into the server, and run 'yum install php-ldap'.

But i get this when I follow the instructions:

[root@nagios ~]# yum install php-ldap
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
* base: mirror.ubiquityservers.com
* epel: mirror.cogentco.com
* extras: mirrors.advancedhosters.com
* rpmforge: mirror.rit.edu
* updates: mirrors.advancedhosters.com
Setting up Install Process
Package php-ldap-5.3.3-14.el6_3.i686 already installed and latest version
Nothing to do

Re: AD integration

Posted: Wed Dec 19, 2012 12:12 pm
by BanditBBS
First time you tried it, was it installed already? If not, did you try restarting apache?

Re: AD integration

Posted: Wed Dec 19, 2012 12:29 pm
by benningtonr
nope, restarting apache now, thanks

Re: AD integration

Posted: Wed Dec 19, 2012 12:48 pm
by benningtonr
OK, restarted Apache, it accepted my settings, now for the 2 dollar question, i logged out and tried to log on using my active dir credentials, no good.
Is there something else that needs to be setup?

Re: AD integration

Posted: Wed Dec 19, 2012 12:54 pm
by BanditBBS
Nope, as long as your settings are correct it should be using your AD password. One of the settings must be incorrect.

Code: Select all

Enabled - checked
Account Suffix - @domain.domain.com
base DN - dc=whatever,dc=whatever,dc=com
domain controllers - machine name or IP
Security - none
That's what my setup looks like, just with real information.

Re: AD integration

Posted: Wed Dec 19, 2012 12:56 pm
by BanditBBS
Also, might be some security setting on the domain controller to allow anonymous lookup, I can't recall.

Re: AD integration

Posted: Wed Dec 19, 2012 12:58 pm
by benningtonr
what decides who has what permissions or the ability to login?

Re: AD integration

Posted: Wed Dec 19, 2012 1:02 pm
by BanditBBS
benningtonr wrote:what decides who has what permissions or the ability to login?
Has to be a user setup in XI. Username in XI has to match a username in AD for it to work, otherwise, if AD is down or no user founf it reverts to use the XI password that user was setup with.

Re: AD integration

Posted: Wed Dec 19, 2012 1:06 pm
by benningtonr
so if the same username and credentials are setup in nagios, what does it need ad for?

Just asking

Re: AD integration

Posted: Wed Dec 19, 2012 1:08 pm
by BanditBBS
benningtonr wrote:so if the same username and credentials are setup in nagios, what does it need ad for?

Just asking
You create a new user in XI and give it whatever password you want. The user never has to login with that password and just always uses their AD password. One less password for the user to have to remember.