TECHZEN Zenoss User Community ARCHIVE  
FORUMS / Installation & Getting Started / DISCUSSION

Unable to configure LDAP/AD authentication

Subject: Unable to configure LDAP/AD authentication
Author: Inf Inf
Posted: 2017-08-17 08:46

Hello,

I have a brand new Zenoss 5.2.6 Core installation and I'm following the below page in order to configure LDAP/AD authentication:

http://wiki.zenoss.org/Enabling_LDAP_Authentication_in_Zenoss_Core_5

I can get all of the way through until I reach step 5 in "Restrict Zenoss access" when I click on "roleManager" it dumps me on the login screen, even though I'm logged in as admin. I get the same when I click on "userManager" and "groupManager" too. If I enter the admin credentials then it still doesn't log me in, it's like the admin user isn't "admin" enough. I can go back to other pages and do everything else, I just can't access these three areas.

Any ideas?

Subject: RE: Unable to configure LDAP/AD authentication
Author: Inf Inf
Posted: 2017-08-23 04:39

Now that 5.3.0 is out, I've tried a fresh install of that instead of 5.2.6, same problem.

Subject: RE: Unable to configure LDAP/AD authentication
Author: John Boyle
Posted: 2017-08-23 10:01

Good morning.  This is a known issue and there is a JIRA ticket open for it.  I am going to find the ticket number and post it here for you with status as it is a public ticket.  - JB

------------------------------
John Boyle
Technology Partnerships & Community Manager
Zenoss
Austin TX
jboyle@zenoss.com
http://www.zenoss.com
------------------------------

Subject: RE: Unable to configure LDAP/AD authentication
Author: Inf Inf
Posted: 2017-08-30 06:33

I found the following JIRA issues related to roleManager being inaccessible:

I tried to use the workaround in ZEN-24700 of setting "dmd.allowManageAccess = True" temporarily as that seemed the cleanest but I still couldn't get it to work. What I ended up doing is commenting out the "disable_pas_resources()" call in /opt/zenoss/Products/ZenUtils/patches/pasmonkey.py after the set of "easy_install ..." steps before then saving the snapshot of the zope container otherwise I found it removed the changes again on restart.

Now I can access the various managers. It would be good to update the original LDAP/AD authentication instructions to either state the correct additional instructions required or make reference to these JIRA issues (which are both marked as closed despite it still not working correctly!) to save the next person who tries to do this the pain as it's really not obvious.


< Previous
Zenoss 5.3 Install 		  Next
Installation/Starting problems 		>