Nagios Support Forum

Hi ,

We would like to setup AD authentication on the xi auth frontend only for Admin users, at the moment we are trialing and i have upgraded to the latest release 2011R1.2. After googling I realised the need for the component and installed the AD component and configured it, however it doesnt work, I have also tried to create a local user with the same name but that didnt work either. Do I have to do anything extra apart from uploading the component and configuring it ?

Many Thanks
Arnab

The component only does one thing at this time - check a username and password combination against AD to see if it's a valid pairing. You will need to create the user in xi first with a random password, and once that is set up they will be able to log in through AD. Note that it does not have any facility currently to only work for Admin users - it will work for any username that exists in AD with the specified base DN.

Hi Tony ,

I did create a local user, with the same id as the remote AD user but to no effect, can you tell me if their are any logs where I can see whats happening ?

Many Thanks
Arnab

I would start with the event logs on the AD machine, so you can see whether there are even any requests being made to it, and then work from there.

Hi ,

I had a look at the windows event log and cant see anything coming in, I also ran a wireshark packet capture and cant see anything from it, this Domain controller is monitored by the same nagios box hence there is not comms issue. I do not think nagios is even trying to do an authentication using the plugin. A quick response to this would be appraciated as we are in the final stages of the POC and this ability is critical for us.

Many Thanks
Arnab

All right, simple checks:

• You are using the component from http://exchange.nagios.org/directory/Ad ... xi/details, yes?
• You installed it as a component, not as a wizard, and everything appears set up fine?
• You have a user created in xi, with the same username as in AD, with the base DN set up correctly?
• That user has a different password in the local xi database, such that an AD failure results in a failed authentication?

Can you expand on "doesn't work"?

Hi,

Yes, the points you have mentioned are correct, by not working I mean it fails to authenticate users to xi interface, when i try to login with the password from AD it just sits their for a while and then comesback with authentication failed.

Many Thanks
Arnab Roy

Can we do anything about this please?

What version of xi are you using? Is there anything interesting in /usr/local/nagiosxi/var/sysstat.log? How about /var/log/httpd/error_log? What version of Windows is the domain controller running?

Hi ,

I have surprise news for you it works straight away after the products license key was finally installed and activated ...needs documentaion ...

Thanks
Arnab