ldap authentication questions

[jlim0930]

I have setup ldap authentication with my cacti install.

I can authenticate and login but once the user is logged in that user does not have privilleges to do anything on cacti.

I have then created a ldap local user with all the permissions setup and put the username as the LDAP Cacti Template User

but it is still not giving the ldap auth user any kind of permissions.

is there anything else that needs to be changed ?

[gandalf]

Did you specify the Template User? This must a an existing user which is copied to a newly created LDAP user as a template.
Reinhard

[jlim0930]

yes the template user field is filled out with a user that has the permissions to view graphs

[BSOD2600]

What account did you specify for the "LDAP Cacti Template User" ?

[jlim0930]

I have a user called ldap
that has ALLOW for default graph policy
and everything but user admin on realm policy active.

when a new ldap user logins the user gets authenticated but has DENY for all graph policys and no permission for anything on the realm policy.

[laurent]

Hi All,

Same issue here using ldap and the Ldap cacti template user is set to guest ( I tried blank as well ) . First login gives that error :
"Notice: Undefined variable: iCols in d:\wwwroot\MRTG\cacti\lib\adodb\adodb-lib.inc.php on line 105

Notice: Undefined variable: iVals in d:\wwwroot\MRTG\cacti\lib\adodb\adodb-lib.inc.php on line 105

Warning: Cannot modify header information - headers already sent by (output started at d:\wwwroot\MRTG\cacti\lib\adodb\adodb-lib.inc.php:105) in d:\wwwroot\MRTG\cacti\auth_login.php on line 83"

A browser refresh leads to " You are not permitted to access this section of Cacti. If you feel that you need access to this particular section, please contact the Cacti administrator." : The rights of viewing graphs are not passed from the guest profile to the new one ...

I'd suspect a certain file does not have the proper rights set ...

Kind regards, Laurent

[rony]

If you are running 0.8.6h, this is a bug.

We will have a patch released sometime this week/weekend.

[rony]

Patch will be posted this week.

[raX]

I posted a corrected version of the MySQL 5.x strict patch to the website a week or so back. Sorry if I did not make it clear on the website. If you already have the old (broken) patch applied, you will need to use the pre-patched files. These are the files that you will need from the pre-patched directory:

cacti.sql
lib/auth.php
lib/database.php
lib/import.php
lib/template.php

Let me know if you have any questions.

-Ian

[jgisler]

Added said Pre-Patched files & still

02/07/2006 04:46:45 PM - CMDPHP: Poller[0] ERROR: SQL Assoc Failed "select user_auth_realm.user_id, user_realm.id, user_realm.name from user_realm left join user_auth_realm on (user_realm.id=user_auth_realm.realm_id and user_auth_realm.user_id=18) order by user_realm.name"
02/07/2006 04:46:22 PM - CMDPHP: Poller[0] ERROR: SQL Assoc Failed "select user_auth_realm.user_id, user_realm.id, user_realm.name from user_realm left join user_auth_realm on (user_realm.id=user_auth_realm.realm_id and user_auth_realm.user_id=18) order by user_realm.name"
02/07/2006 04:46:06 PM - CMDPHP: Poller[0] ERROR: SQL Assoc Failed "select user_auth_realm.user_id, user_realm.id, user_realm.name from user_realm left join user_auth_realm on (user_realm.id=user_auth_realm.realm_id and user_auth_realm.user_id=18) order by user_realm.name"

[TheWitness]

What version of MySQL? If version 5.x, can you please remove the sql_mode runtime option and restart MySQL and see if the problem goes away?

TheWitness

[jgisler]

Server version 4.0.18-log