Re: [Hyperic-hq-discuss] How to configure Hyperic to use Active Directory for LDAP Authenticatio

[Ryan M. <rm...@hy...>]

I just confirmed that others have this working with 3.0.2, so it may be the login property that's causing the issue.  If that were the case though, I'd expect some other errors to be logged.

To provide some background, the username and password entered in the LDAP configuration section is used for directories that do not allow anonymous searches.  Those credentials are used to find the user using a filter that uses the login property.

So for example if my loginProperty is set to cn, when I login as rmorgan it will construct a fitler that looks like:

(cn=rmorgan)

HQ then tries to rebind to the directory using the credentials given in the login page.

You can also enable debug logging for this class which may provide some more info.  Edit hq-engine/server/default/conf/log4j.xml and add a section that looks like:

  <category name="com.hyperic.hq.auth.server.LdapLoginModule">
    <priority value="DEBUG"/>
  </category>

That should hopefully give us the info we need.

Thanks,
-Ryan