AD / LDAP Authentication

Patrick Wickard

unread,

Jul 29, 2015, 3:18:18 AM7/29/15

to Thruk

Hello

Can somebody give me some hints how to authenticate users using LDAP?

Is there a way to do it with Cookie Authentication? I can't find any information about it so far...

Or is it better to switch back to basic-HTTP authentication and use Apache mod_ldap?

Many thanks

Thruk 2.00
Shinken 2.4
Apache 2.4.7
Ubuntu 14.04.2 LTS
Active directory || OpenLDAP

Sven Nierlein

unread,

Jul 29, 2015, 3:25:31 AM7/29/15

to th...@googlegroups.com

Hi,

Thruks Cookie Auth is just on top of whatever Apache authenticates. So it's not different
from before and every ldap auth guide works also with cookie auth.

Cheers,
Sven

> --
> You received this message because you are subscribed to the Google Groups "Thruk" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to thruk+un...@googlegroups.com <mailto:thruk+un...@googlegroups.com>.
> For more options, visit https://groups.google.com/d/optout.

Patrick Wickard

unread,

Jul 29, 2015, 10:14:10 AM7/29/15

to Thruk, sv...@nierlein.de

hi sven

thank you for your reply - easier than i tought... :-) it works like a charm!

if anybody cares - here is my working setting (Active directory)

/etc/apache2/conf-available/thruk.conf

<Location /thruk/>
        Options ExecCGI FollowSymLinks
         AuthName "Thruk Monitoring"
         AuthType Basic

        #leagacy file authentication first, then ldap
        AuthBasicProvider file ldap

        #legacy file (or set it to /dev/null
        AuthUserFile /etc/thruk/htpasswd

        #ldap
        # Using this to bind
        AuthLDAPBindDN "CN=thruk-ldap,OU=serviceaccounts,OU=bla,DC=site,DC=org,DC=com"
        AuthLDAPBindPassword "xxx"
        AuthLDAPURL "ldap://site.org.com/OU=bla,DC=site,DC=org,DC=com?sAMAccountName?sub?(objectClass=*)"
        require valid-user
</Location>

Sven Nierlein

unread,

Jul 29, 2015, 1:10:08 PM7/29/15

to th...@googlegroups.com

Hi,

thanks for sharing your results. Can i convince you to create a small chapter under:
https://github.com/sni/Thruk/blob/master/docs/documentation/install-webserver.asciidoc
I guess there are many people with the same questions.

Thanks,
Sven

Patrick Wickard

unread,

Aug 10, 2015, 9:52:03 AM8/10/15

to Thruk

of course: https://github.com/sni/Thruk/commit/96a12df79eeccbc90bd80ade2ebd8981cf0f7355

Sven Nierlein

unread,

Aug 13, 2015, 5:44:50 AM8/13/15

to th...@googlegroups.com

Great. Thanks a lot.

On 10/08/15 15:52, Patrick Wickard wrote:
> of course: https://github.com/sni/Thruk/commit/96a12df79eeccbc90bd80ade2ebd8981cf0f7355

Reply all

Reply to author

Forward