LDAP Authentication Issue - Active Directory [SOLVED!]

Post general support questions here that do not specifically fall into the Linux or Windows categories.

Moderators: Developers, Moderators

Post Reply
Khue
Posts: 45
Joined: Fri Jun 29, 2012 3:43 pm

LDAP Authentication Issue - Active Directory [SOLVED!]

Post by Khue »

I've been beating my head against the wall trying to figure out this active directory authentication thing. I've finally broke Cacti beyond the point where I can fix it. I've actually locked myself out of the entire system. The last thing I did was change the guest template option and the option below that from "guest" to "admin." It immediately booted me back to the authentication page and presented me with 3 fields: username, password, and Realm. If I try my AD credentials I get "Error: Access Denied, user account disabled." If I try to use the local realm the page refreshes back to the login screen. Any help would be greatly appreciated.

Thanks in advance.
Last edited by Khue on Mon Jul 02, 2012 11:52 pm, edited 1 time in total.
Khue
Posts: 45
Joined: Fri Jun 29, 2012 3:43 pm

Re: LDAP Authentication Issue - Active Directory

Post by Khue »

Ok, I've found this post: http://forums.cacti.net/about31602.html. This seems to be exactly what has happened. Can anyone explain to me how to reverse this? I have already started to download the MYSQL tool set. I suppose I will need to connect to the database system with the SQL Management Studio equivalent and run an update statement against a user table.

Can anyone assist?
Khue
Posts: 45
Joined: Fri Jun 29, 2012 3:43 pm

Re: LDAP Authentication Issue - Active Directory

Post by Khue »

Ok further update: I got into my database system and I think I see the lines from the settings table that I need to change. Here is roughly what i did:

Code: Select all

+-------------------+------------------------------------------------------------------------------+
| name              | value                                                                        |
+-------------------+------------------------------------------------------------------------------+
| guest_user        | admin                                                                        |
| user_template     | admin                                                                        |
+-------------------+------------------------------------------------------------------------------+
I believe I need to update those two values back to "guest" for me to gain access back to my system. Can anyone assist?
Khue
Posts: 45
Joined: Fri Jun 29, 2012 3:43 pm

Re: LDAP Authentication Issue - Active Directory

Post by Khue »

Ugh, I am so sorry for spamming this post. I am just being driven insane by this...

So here is what I have tried so far:
  1. I attempted to change the guest_user and user_template values to 'guest' by using:

    Code: Select all

    update settings set value = 'guest' where name = 'guest_user';
    update settings set value = 'guest' where name = 'user_template';
    This did not work
  2. I then attempted to remove LDAP authentication by changing auth_method from 3 to 1

    Code: Select all

    update settings set value = '1' where name = 'auth_method';
    
    That did not work either.
Here are my last two concurrent attempts to login with local credentials:

Code: Select all

07/02/2012 06:32:03 PM - AUTH LOGIN: User 'admin' Authenticated
07/02/2012 06:34:35 PM - AUTH LOGIN: User 'admin' Authenticated
Both situations resulted in a loopback to the login page. I am stuck... and aggravated. Again sorry for the board spam, I just feel like the more info I post the better off someone will be able to help me.
artagel
Cacti User
Posts: 226
Joined: Wed May 21, 2008 11:33 pm

Re: LDAP Authentication Issue - Active Directory

Post by artagel »

I just gave someone else the solution for this the other day.
Search the forums using google might have found it.
http://forums.cacti.net/viewtopic.php?f=2&t=47628
Please mark the topic solved if this resolves your problem.
Khue
Posts: 45
Joined: Fri Jun 29, 2012 3:43 pm

Re: LDAP Authentication Issue - Active Directory

Post by Khue »

I was searching things like Authentication and LDAP. I probably wouldn't have found it using the line of thinking I had been using and the search strings.

For those of you that don't want to bump over to the other link here's the gist of what artagel recommends you do:

Code: Select all

delete from settings where name="guest_user";
delete from settings where name="user_template";
Huge thanks to artagel!

Edit: If someone wants me to explain a little bit on how you can quickly gain access to the mysql system and what commands you have to use prior to running the delete commands listed above let me know and I will update.
Post Reply

Who is online

Users browsing this forum: No registered users and 3 guests