Community pioneers
Wanted to contribute with ideas?, want to expand the use of pandora or to help us improving it?. This... View more
Organizer:
- Organized by
-
-
LDAP integration with Searching User
-
LDAP integration with Searching User
Hi, Pandora FMS Team
I’m using the Pandora FMS for a week now and I’m very satisfied regarding its features, the ease of use and the intuitive web interface. Everything seems to work as close as what I have with the combination of a Nagios and a Cacti implementation, but glued on the same tool. Awesome!
The LDAP integration is working flawlessly as well and the settings are as trivial as other PHP based applications. The same challenges faced here was already overcome in another implementations (e.g. Cacti). I’m even using the LDAPS feature with self signed certificates and I don’t think it would be a big deal to change it to signed ones.
But as far as I’m using the Pandora FMS, I wasn’t able to get the Searching User working. Since there’s no way to set this on the web interface, I assume that it’s not possible to be done and the authentication used by Pandora FMS is performed by binding the inserted user directly on the LDAP server.
So, have you considered put the Searching User option in order to make the bind from this user and then get the login information?
Regards,
Thiago Lima -
2 Replies
-
-
Hi ivo_yordanov,
Thanks for your reply. If by “look up users” we are talking about the creation of new users based on LDAP data, so yes, I’m talking about it. I’ve noticed that the Pandora behavior regarding LDAP is to bind on the server one single time to gather user data such as username and password and then the user is created locally.
I’m interested on a complete integration where the Pandora FMS doesn’t have the user itself but instead performs a bind to the server every time a user wants to sign in.
There’s two ways for that to be done:
[list=1]- The Pandora FMS binds the LDAP server with the same username and password put on the login page;
- The Pandora FMS binds the LDAP server with its own username and password asking the required information about the login data put on the login page.
The better way for that to be done, for me, is the number 2. But that would be very good for Pandora FMS to have both.
I’m not sure how exactly I could be useful and help on this implementation since I’m more like a sysadmin than a developer. But I make myself available for helping! š
Regards,
Thiago Lima
