LDAP Authentication Issues

HI there.

I'm struggling to get LDAP Auth working with Cacti and am hoping someone can
help.

I've tried to take it step by step and initially choose the most simple of
setups but even that is failing.

The error from the Cacti GUI is "LDAP Error: General bind error, LDAP
result: Invalid DN syntax"

The error in my LDAP logs is...

Aug  4 13:08:56 hostname slapd[2362]: conn=454961 fd=28 ACCEPT from IP=
10.100.104.20:53209 (IP=0.0.0.0:389)
Aug  4 13:08:56 hostname slapd[2362]: bind: invalid dn
(dn="uid=firstname.lastname,ou=London,ou=People,dc=testdomain,dc=com")
Aug  4 13:08:56 hostname slapd[2362]: conn=454961 op=0 RESULT tag=97 err=34
text=invalid DN
Aug  4 13:08:56 hostname slapd[2362]: conn=454961 op=1 UNBIND
Aug  4 13:08:56 hostname slapd[2362]: conn=454961 fd=28 closed

But I can clearly see other successful bindings using the same syntax...

Aug  4 13:02:25 hostname slapd[11477]: conn=509935 op=18 BIND
dn="uid=firstname.lastname,ou=London,ou=People,dc=testdomain,dc=com"

Can anyone help explain what may be wrong ?

The sections I have filled in on the "Authentication" tab are...

Re: LDAP Authentication Issues

My LDAP Auth config in cacti is very similar. Teh only difference is
that my search base begins with 'ou=people'.

ou=people,dc=fsu,dc=edu

Give that a try and see what happens.

On Tue, 2009-08-04 at 14:35 +0100, Andrew Hall wrote:
> HI there.
> 
> I'm struggling to get LDAP Auth working with Cacti and am hoping someone can
> help.
> 
> I've tried to take it step by step and initially choose the most simple of
> setups but even that is failing.
> 
> The error from the Cacti GUI is "LDAP Error: General bind error, LDAP
> result: Invalid DN syntax"
> 
> The error in my LDAP logs is...
> 
> Aug  4 13:08:56 hostname slapd[2362]: conn=454961 fd=28 ACCEPT from IP=
> 10.100.104.20:53209 (IP=0.0.0.0:389)
> Aug  4 13:08:56 hostname slapd[2362]: bind: invalid dn
> (dn="uid=firstname.lastname,ou=London,ou=People,dc=testdomain,dc=com")
> Aug  4 13:08:56 hostname slapd[2362]: conn=454961 op=0 RESULT tag=97 err=34
> text=invalid DN
> Aug  4 13:08:56 hostname slapd[2362]: conn=454961 op=1 UNBIND
> Aug  4 13:08:56 hostname slapd[2362]: conn=454961 fd=28 closed
> 

Re: LDAP Authentication Issues

Typically, with open ldap, you can do anonymous searching to locate the 
Distinguished Name (DN) of the user.  Searching is used if you have 
users in multiple Organizational Units (OU).  If you only have one OU, 
then you shouldn't have to worry about searching, this is if your Common 
Name (CN) is the users username.  In the case presented here, the users 
CN is not the username, but the full name.

So in this case, you would need to do searching to locate the users DN, 
based on searching the directory, typically in a certain sub tree.

 From what you have provided, I would suggest the following settings:

	Mode: Anonymous Searching
	Search Base: ou=People,dc=testdomain,dc=com
	Search Filter: (&(objectClass=account)(uid=<username>))
	
If Anonymous Searching does not work, then use Specific Searching and 
provide a "Search Distingished Name (DN)" and "Search Password" to allow 
searching to authenticate to the LDAP directory.

Tony Roman
Cacti Developer

Edson Manners wrote:
> My LDAP Auth config in cacti is very similar. Teh only difference is
> that my search base begins with 'ou=people'.
> 
> ou=people,dc=fsu,dc=edu
> 
> Give that a try and see what happens.

[ucd/net cpu usage] inaccurate, very low

Hi all,

Cacti .8.7d
Spine .8.7e
Centos 5.3x64

Monitoring Linux, OSX, Win clients.

- cpu usage
- mem usage
- network i/o
- disk i/o
- # of processes

My issue with with cpu usage.

I peg my multi core hosts 100% (top showing 400% and 800% depending on  
core architecture).

My cacti graphs spike at only ~10-15% max.

I've following some threads, installed some additional templates (ones  
that specifically render graphs based on individual cores) but same  
results.

I really only desire total % cpu usage regardless of core/cpu quantity.

Any advice is greatly appreciated to an order of magnitude.

- aurf

Re: [ucd/net cpu usage] inaccurate, very low

Where did you obtain your Cacti from?  Where did you get the template.  
It is different from the "default", this is why I ask.

TheWitness

aurfalien <at> gmail.com wrote:
> Hi all,
>
> Cacti .8.7d
> Spine .8.7e
> Centos 5.3x64
>
> Monitoring Linux, OSX, Win clients.
>
> - cpu usage
> - mem usage
> - network i/o
> - disk i/o
> - # of processes
>
> My issue with with cpu usage.
>
> I peg my multi core hosts 100% (top showing 400% and 800% depending on  
> core architecture).
>
> My cacti graphs spike at only ~10-15% max.
>
> I've following some threads, installed some additional templates (ones  
> that specifically render graphs based on individual cores) but same  
> results.

Re: [ucd/net cpu usage] inaccurate, very low

Hi Larry,

Thanks for the reply.

Its all stock Cacti from cacti.net.

The only things I added were;
diskio
a better mem usage template

The rest of the stuff is stock.

I just realized you responded to my forum post, thanks for that.

I changed the colors of the cpu usage graph and got rid of nice which  
is why it may look diff from stock.

- aurf

On Aug 7, 2009, at 12:34 PM, Larry Adams wrote:

> Where did you obtain your Cacti from?  Where did you get the template.
> It is different from the "default", this is why I ask.
>
> TheWitness
>
> aurfalien <at> gmail.com wrote:
>> Hi all,
>>
>> Cacti .8.7d

Re: [ucd/net cpu usage] inaccurate, very low

Attached top output which Cacti graphs shows at ~15% CPU usage.

On Aug 7, 2009, at 12:34 PM, Larry Adams wrote:

> Where did you obtain your Cacti from?  Where did you get the template.
> It is different from the "default", this is why I ask.
>
> TheWitness
>
> aurfalien <at> gmail.com wrote:
>> Hi all,
>>
>> Cacti .8.7d
>> Spine .8.7e
>> Centos 5.3x64
>>
>> Monitoring Linux, OSX, Win clients.
>>
>> - cpu usage
>> - mem usage
>> - network i/o
>> - disk i/o
>> - # of processes
>>
>> My issue with with cpu usage.
>>
>> I peg my multi core hosts 100% (top showing 400% and 800% depending  

Re: [ucd/net cpu usage] inaccurate, very low

Well, oftentimes NICE cpu is all of it.  So, removing it was definately 
a mistake.

TheWitness

aurfalien <at> gmail.com wrote:
> Hi Larry,
>
> Thanks for the reply.
>
> Its all stock Cacti from cacti.net.
>
> The only things I added were;
> diskio
> a better mem usage template
>
> The rest of the stuff is stock.
>
> I just realized you responded to my forum post, thanks for that.
>
> I changed the colors of the cpu usage graph and got rid of nice which  
> is why it may look diff from stock.
>
> - aurf
>
> On Aug 7, 2009, at 12:34 PM, Larry Adams wrote:
>
>   
>> Where did you obtain your Cacti from?  Where did you get the template.
>> It is different from the "default", this is why I ask.

Re: [ucd/net cpu usage] inaccurate, very low

No attachment.  Sorry.

aurfalien <at> gmail.com wrote:
> Attached top output which Cacti graphs shows at ~15% CPU usage.
>
>
> On Aug 7, 2009, at 12:34 PM, Larry Adams wrote:
>
>> Where did you obtain your Cacti from?  Where did you get the template.
>> It is different from the "default", this is why I ask.
>>
>> TheWitness
>>
>> aurfalien <at> gmail.com wrote:
>>> Hi all,
>>>
>>> Cacti .8.7d
>>> Spine .8.7e
>>> Centos 5.3x64
>>>
>>> Monitoring Linux, OSX, Win clients.
>>>
>>> - cpu usage
>>> - mem usage
>>> - network i/o
>>> - disk i/o
>>> - # of processes
>>>
>>> My issue with with cpu usage.
>>>

Re: [ucd/net cpu usage] inaccurate, very low

I posted it in our thread on the forum.

I've added nice back in, will see what happens.

On Aug 7, 2009, at 1:15 PM, Larry Adams wrote:

> No attachment.  Sorry.
>
> aurfalien <at> gmail.com wrote:
>> Attached top output which Cacti graphs shows at ~15% CPU usage.
>>
>>
>> On Aug 7, 2009, at 12:34 PM, Larry Adams wrote:
>>
>>> Where did you obtain your Cacti from?  Where did you get the  
>>> template.
>>> It is different from the "default", this is why I ask.
>>>
>>> TheWitness
>>>
>>> aurfalien <at> gmail.com wrote:
>>>> Hi all,
>>>>
>>>> Cacti .8.7d
>>>> Spine .8.7e
>>>> Centos 5.3x64
>>>>
>>>> Monitoring Linux, OSX, Win clients.
>>>>
>>>> - cpu usage