External Active Directory authentication issue

Help
1

Dear all

I’m having trouble with active directory authentication, when i try to login with one of the users that is part of the “librenms admins” group it gives me invalid credentials.
My config.php section looks like this:

### Authentication Model
$config['auth_mechanism'] = "active_directory"; # default, other options: ldap, http-auth
$config['auth_ad_url'] = 'ldap://10.0.100.40';    // Set server(s), space separated. Prefix $
$config['auth_ad_domain'] = 'domain.local';
$config['auth_ad_base_dn'] = 'dc=domain,dc=local';         // groups and users must be$
$config['auth_ad_check_certificates'] = false;             // require a valid ssl certificate
$config['auth_ad_binduser'] = '[email protected]';          // bind user (non-admi$
$config['auth_ad_bindpassword'] = 'password123';      // bind password
$config['auth_ad_timeout'] = 5;                           // time to wait before giving up ($
$config['auth_ad_debug'] = false;                         // enable for verbose debug messag$
$config['active_directory']['users_purge'] = 30;          // purge users who haven't logged $
$config['auth_ad_require_groupmembership'] = true;        // false: allow all users to auth $
$config['auth_ad_groups']['librenms admins']['level'] = 10; // set the "AD AdminGroup" group $
$config['auth_ad_groups']['librenms readers']['level'] = 5;   // set the "AD UserGroup" group$
#
#$config['http_auth_guest'] = "guest"; # remember to configure this user if you use http-auth

Does anyone have any idea what might go wrong in here?

If any of you managed to get the AD authentication, could you share your config with me please?

Thanks,
Marius.

2

update:

just ran this script:

./scripts/auth_test.php -u librenms.admin

and i got the following error:

Could not bind to AD, you will not be able to use the API or alert AD users

i simply got no idea what could cause this error…

3

Error says it … could not bind to AD. check your AD settings.

4

Hi Kevin,

thanks for the reply. the issue is very weird, because i’m having the same accounts and groups set up for graylog AD authentication and in Graylog everything works fine…

Thanks,
Marius.