Hi

Thnx but we are not using nested groups at this moment.

I Will put up my config Soon

Cheers

Met vriendelijke groeten, Mes meilleures salutations, Best regards.

Rutger Truyers

On Fri, Feb 21, 2014 at 9:32 AM, Adriaan Smuts adriaan.smuts@webafrica.comwrote:

Hi,

We had the same issue once. Make sure that you are not using nested groups.

Regards

*Adriaan Smuts*

*Systems Administrator*

[image: Web Africa]

Direct Line

*+27 21 464 9565 <%2B27%2021%20464%209565>*

Reception

*086 000 9500*

Website

*www.webafrica.co.za http://www.webafrica.co.za/*

*From:* observium [mailto:observium-bounces@observium.org] *On Behalf Of *Jeff Courtade *Sent:* Friday, February 21, 2014 1:07 AM *To:* Tom Laermans; Observium Network Observation System

*Subject:* Re: [Observium] LDAP Auth not able to use level 10

Use the hostname ui.tadj1.adjuggler.net.

--

Thanks,

Jeff Courtade Director of Systems Engineering Adjuggler Inc http://www.adjuggler.com M: 240.507.6116

-------- Original message -------- From: Tom Laermans Date:02/20/2014 5:47 PM (GMT-05:00) To: Observium Network Observation System Subject: Re: [Observium] LDAP Auth not able to use level 10

Hi Rutger,

The problem has been seen here on the list a few times already, but unfortunately I can't replicate it. :[

I presume access to your Observium install is out of the question?

Tom

On 20/02/2014 20:29, Rutger Truyers wrote:

Hi,

I've set up the ldap authentication with AD.

The LDAP binding , Search and Authentication is all succesfull.

even the group matching is perfect.

But I'm not able to provide the group a level 10 authentication.

When authenticating the user in the correct group can't see any device.

Greetings.

---

observium mailing list

observium@observium.org

http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

---

observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

Hi,

Was anyone able to fix this issue concerning LDAP and leveling ? Thnx.

Met vriendelijke groeten, Mes meilleures salutations, Best regards.

Rutger Truyers

On Sat, Feb 22, 2014 at 1:03 PM, Rutger Truyers r.truyers@gmail.com wrote:

Hi,

this is my config (the value's has been changed to the real values)

//AD LDAP authentication AD //required ldap settings $config['auth_ldap_binddn'] = "cn=ldap,cn=users,dc=test,dc=local"; $config['auth_ldap_bindpw'] = "Removed";

$config['auth_ldap_attr']['uid'] = "sAMAccountName"; $config['auth_ldap_attr']['uidNumber'] = "objectSid"; $config['auth_ldap_attr']['cn'] = "name"; $config['auth_ldap_objectclass'] = "person";

$config['auth_ldap_version'] = 3; $config['auth_ldap_server'] = "testdc.test.local"; $config['auth_ldap_port'] = 3268; $config['auth_ldap_starttls'] = FALSE;

    //user account settings

$config['auth_ldap_attr']['uid'] = "sAMAccountName"; $config['auth_ldap_suffix'] = ",cn=Users,dc=test,dc=local"; $config['auth_ldap_group'] = "cn=Observium_Admins,dc=test,dc=local"; $config['auth_ldap_groupbase'] = "cn=Users,dc=test,dc=local";

$config['auth_ldap_groupmemberattr'] = "memberOf"; unset($config['auth_ldap_groups']); $config['auth_ldap_groups']['Observium_Admins']['level'] = "10"; $config['auth_ldap_groups']['Observium_Users']['level'] = "5";

Met vriendelijke groeten, Mes meilleures salutations, Best regards.

Rutger Truyers

On Fri, Feb 21, 2014 at 4:02 PM, Rutger Truyers r.truyers@gmail.comwrote:

...

Hi

Thnx but we are not using nested groups at this moment.

I Will put up my config Soon

Cheers

Met vriendelijke groeten, Mes meilleures salutations, Best regards.

Rutger Truyers

On Fri, Feb 21, 2014 at 9:32 AM, Adriaan Smuts < adriaan.smuts@webafrica.com> wrote:

...

Hi,

We had the same issue once. Make sure that you are not using nested groups.

Regards

*Adriaan Smuts*

*Systems Administrator*

[image: Web Africa]

Direct Line

*+27 21 464 9565 <%2B27%2021%20464%209565>*

Reception

*086 000 9500*

Website

*www.webafrica.co.za http://www.webafrica.co.za/*

*From:* observium [mailto:observium-bounces@observium.org] *On Behalf Of *Jeff Courtade *Sent:* Friday, February 21, 2014 1:07 AM *To:* Tom Laermans; Observium Network Observation System

*Subject:* Re: [Observium] LDAP Auth not able to use level 10

Use the hostname ui.tadj1.adjuggler.net.

--

Thanks,

Jeff Courtade Director of Systems Engineering Adjuggler Inc http://www.adjuggler.com M: 240.507.6116

-------- Original message -------- From: Tom Laermans Date:02/20/2014 5:47 PM (GMT-05:00) To: Observium Network Observation System Subject: Re: [Observium] LDAP Auth not able to use level 10

Hi Rutger,

The problem has been seen here on the list a few times already, but unfortunately I can't replicate it. :[

I presume access to your Observium install is out of the question?

Tom

On 20/02/2014 20:29, Rutger Truyers wrote:

Hi,

I've set up the ldap authentication with AD.

The LDAP binding , Search and Authentication is all succesfull.

even the group matching is perfect.

But I'm not able to provide the group a level 10 authentication.

When authenticating the user in the correct group can't see any device.

Greetings.

---

observium mailing list

observium@observium.org

http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

---

observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium