Page 1 of 1
Apache LDAP breaks CCM
Posted: Wed Feb 06, 2013 6:53 pm
by timchin
I've recently configured LDAP via Apache in nagios.conf & nagiosxi.conf. I prefer to do this in Apache as we use both Nagios core & NagiosXI interfaces and would like a seamless transition between the two. Navigation and everything is working as expected. However, the only casualty is CCM (Core Config Manager).
I can authenticate against CCM using those specific credentials, make my changes, etc. However, once I click 'Apply configuration', it sits and spins on 'Waiting for configuration verification' indefinitely. If I tail cmdsubsys.log, all authentication looks great and all sections report 'OK'.
Once I remove the LDAP configuration from nagiosxi.conf, restart httpd, the 'Waiting for configuration verification' completes immediately. Any changes from that point forward apply within seconds until I put the LDAP configuration back in.
Has anyone seen this before and/or can shed any light on how to enable LDAP for NagiosXI using Apache w/o breaking CCM? Thanks!
Tim
Re: Apache LDAP breaks CCM
Posted: Thu Feb 07, 2013 10:45 am
by abrist
Have you tried using the
ldap XI component?
Re: Apache LDAP breaks CCM
Posted: Thu Feb 07, 2013 3:58 pm
by timchin
I did try that component, but I had issues getting into Nagios core. Especially, if the user would change their LDAP password or if the LDAP password contained spaces. I'd like to seamlessly go from Nagios Core to Nagios XI, which works with Apache doing the authentication. However, my CCM no longer works, which is one of the main benefits of NagiosXI.
Re: Apache LDAP breaks CCM
Posted: Thu Feb 07, 2013 4:16 pm
by mguthrie
However, my CCM no longer works, which is one of the main benefits of NagiosXI.
Can you give a little more detail as to how the CCM is broken?
Re: Apache LDAP breaks CCM
Posted: Fri Feb 08, 2013 12:11 pm
by timchin
When using Apache LDAP config, CCM will sit and spin when applying configuraiton (per my first post).
When using LDAP/AD components in NagiosXI, I have issues with seamlessly transitioning between Nagios Core & Nagios XI. We primarily use Nagios core, but the perfdata comes from Nagios XI, so I'd like to be able to click on extra actions and not have to authenticate again to Nagios XI. All of that works with Apache LDAP config, but CCM no longer functions.
It appears to be a win/lose situation. Maybe if it were possible to set the CCM directories up to not use LDAP authentication, but I'm not well versed with how to do that.
Re: Apache LDAP breaks CCM
Posted: Fri Feb 08, 2013 3:25 pm
by timchin
I found that creating a symbolic link to the perfdata in the nagios directory would make it so our users don't have to cross between Core & XI. It seems to be working great. Then, I could use the AD component for Nagios XI, if necessary.
I think I just discovered an issue with the latest version of XI, though. CCM appears to be changing '&' characters to & in the .cfg files, which is not understood.
Re: Apache LDAP breaks CCM
Posted: Fri Feb 08, 2013 4:02 pm
by mguthrie
I think I just discovered an issue with the latest version of XI, though. CCM appears to be changing '&' characters to & in the .cfg files, which is not understood.
This is a known bug for the 2012r1.4 release and is fixed the latest version (1.6).
Re: Apache LDAP breaks CCM
Posted: Mon Feb 11, 2013 6:25 pm
by timchin
I'm on 1.6 - immediately after the upgrade and applying the confguration is when this started.
Re: Apache LDAP breaks CCM
Posted: Tue Feb 12, 2013 11:03 am
by abrist
Do you experience the issues when creating a brand new url service check, or are the issues just with preexisting checks?