Hi, I upgrade to 18.01 (from 4.5) and i see picture error in cabinet view
for each device, that has a picture. But, when I open that device, picture
is shown normally.
Thank you for help.
so 24. 3. 2018 v 3:37 odesÃlatel robert saunders <
***@gmail.com> napsal:
> Seems like it doesn't like your password or your account doesn't have
> enough permissions to do the bind
>
> Do you have another account you could test with
>
>
>
> On 24 Mar 2018, at 2:39 am, Paul Collado <***@hotmail.com> wrote:
>
> Hi,
>
>
> I got a little farther setting up LDAP authentication. Didn't have the
> ldap modules properly enabled. Now I'm getting authentication request and
> my error logs seem to be recognizing the login and credentials, but it
> seems I'm still having issues with the binding server. Here are some of
> the details, maybe you can please help me. I'm trying to get this working
> on a DEV environment with a new installation of ubuntu 16.04 and openDCIM
> 18.01:
>
>
> [Fri Mar 23 11:16:03.932451 2018] [:error] [pid 1664] [client
> 192.168.101.83:50832] PHP Warning: ldap_bind(): Unable to bind to
> server: Invalid credentials in /var/www/openDCIM-18.01/login_ldap.php on
> line 37, referer: https://192.168.101.76/login_ldap.php
> [Fri Mar 23 11:16:03.932519 2018] [:error] [pid 1664] [client
> 192.168.101.83:50832] Unable to bind to specified LDAP server with
> specified username/password. Username:"domain.com"\\colladop, referer:
> https://192.168.101.76/login_ldap.php
> [Fri Mar 23 11:16:12.819888 2018] [:error] [pid 1663] [client
> 192.168.101.83:50844] PHP Warning: ldap_bind(): Unable to bind to
> server: Invalid credentials in /var/www/openDCIM-18.01/login_ldap.php on
> line 37, referer: https://192.168.101.76/login_ldap.php
> [Fri Mar 23 11:16:12.820101 2018] [:error] [pid 1663] [client
> 192.168.101.83:50844] Unable to bind to specified LDAP server with
> specified username/password. Username:colladop@"domain.com", referer:
> https://192.168.101.76/login_ldap.php
> [Fri Mar 23 11:16:24.329910 2018] [:error] [pid 1665] [client
> 192.168.101.83:50861] LDAP Authentication failed for username:colladop,
> referer: https://192.168.101.76/login_ldap.php
>
>
> Here is my line 37 on my login_ldap.php file:
> $ldapBind = ldap_bind( $ldapConn, $ldapDN, $ldapPassword );
>
> Here are my OpenDCIM LDAP Authentication settings:
>
> LDAP Server URI: ***@domain.com
> Base DN: dc=domain,dc=com
> Base Search: (&(objectClass=group)(CN=DCIM*))
> Bind DN: %userid%@domain.com
> User Search: (|(sAMAccountName=%userid%))
>
> Thanks,
>
> Paul Collado
>
> ------------------------------
> *From:* Discussion <discussion-***@list.opendcim.org> on behalf of
> robert saunders <***@gmail.com>
> *Sent:* Wednesday, March 21, 2018 7:13 PM
> *To:* ***@list.opendcim.org
> *Subject:* Re: [Discussion] openDCIM-18.01 Officially Released
>
> If you can jump on the IRC channel
> http://webchat.freenode.net/?channels=%23opendcim
> freenode Web IRC (qwebirc)
> <http://webchat.freenode.net/?channels=%23opendcim>
> webchat.freenode.net
> Javascript is required to use IRC.
>
>
> and I try to help
>
> On 22 March 2018 at 10:09, robert saunders <***@gmail.com>
> wrote:
>
> so when you log in paul
>
> does it show your username in the top right corner after you tried to log
> in
>
> On 22 March 2018 at 09:59, Paul Collado <***@hotmail.com> wrote:
>
> Yes, I added the groups to AD and put my AD account as members of the site
> admin and site access groups, but I'm not able to login with AD credentials
> to OpenDCIM.
>
>
> Thanks,
>
>
> Paul Collado
>
>
> ------------------------------
> *From:* Discussion <discussion-***@list.opendcim.org> on behalf of
> robert saunders <***@gmail.com>
> *Sent:* Wednesday, March 21, 2018 6:52 PM
>
> *To:* ***@list.opendcim.org
> *Subject:* Re: [Discussion] openDCIM-18.01 Officially Released
>
> Have you added the relevant groups and added the relevant users into said
> groups in AD
>
> also when you do login with AD credentials does it show your username in
> the top right corner
>
> Regards
>
> Robert
>
> On 22 March 2018 at 09:30, Paul Collado <***@hotmail.com> wrote:
>
> Thank you again,
>
>
> I'm able to get prompted for LDAP credentials, but still unable to
> authenticate using my AD account. Therefore, I will continue to play with
> the base search parameters and get back to you with results.
>
>
> Thanks,
>
>
> Paul Collado
>
>
> ------------------------------
> *From:* Discussion <discussion-***@list.opendcim.org> on behalf of
> robert saunders <***@gmail.com>
> *Sent:* Wednesday, March 21, 2018 6:03 PM
>
> *To:* ***@list.opendcim.org
> *Subject:* Re: [Discussion] openDCIM-18.01 Officially Released
>
> Hey Paul
>
> Yes you will need to change a file in open DCIM you cant have both turned
> on at the same time but it is easy enough to change back and forth
>
> you change it under the db.inc.php
>
> you just un-comment the line define Authentication LDAP
>
> and comment out the line define Authentication Apache
>
> Regards
>
> Robert
>
>
> On 22 March 2018 at 08:45, Paul Collado <***@hotmail.com> wrote:
>
> Thank you very much Robert,
>
>
> Is there anything I need to change in OpenDCIM to change from using Apache
> authentication to LDAP? if Yes, can I use both in order to have a backdoor
> in case AD fails for some reason?
>
>
> Thanks,
>
>
> Paul Collado
>
>
> ------------------------------
> *From:* Discussion <discussion-***@list.opendcim.org> on behalf of
> robert saunders <***@gmail.com>
> *Sent:* Wednesday, March 21, 2018 5:12 PM
>
> *To:* ***@list.opendcim.org
> *Subject:* Re: [Discussion] openDCIM-18.01 Officially Released
>
> Ok So this is how I have it working with LDAP with no modifications
>
> *LDAP Server URI : *Pretty Self Explanatory this is the FQDN for your
> LDAP server / domain controller
>
> *BASE DN:* This is the very top level of you your DOMAIN e.g.
> ou=Top-Level,dc=example,dc=com
>
> *Base Search: *This was the tricky one to figure out this is to narrow
> down tour search to just the groups you want we use
> *(&(objectClass=group)(cn=openDCIM*))*
> so that is basically saying look for any groups with *"openDCIM"* in the
> name as that is how we named our groups in AD. You can change the end part
> to match how you have named your groups
>
> *BIND DN: * This is which account are you going to use to do the AD
> search in our case all users are able to perform and AD search so we use
>
> %userid%@example.com this will depend on the permissions you give your
> users in AD
>
>
> *User Search: *This is the user that we are actually looking up in AD to
> find which DCIM groups they are a member of we use
>
> (|(sAMAccountName=%userid%)) and that should work for all Microsoft AD
>
>
>
> So then you have the Group Distinguished names.So you need to create a
> bunch of groups in AD and put the users in them this will then grant them
> the various permissions
>
> I wont go into what each group does as that has been covered before
>
>
> what is important is that the group names have something similar in them
> that you can search in the above base Search as per the example with call
> all our groups openDCIM_<the group name in DCIM> that way we can do our
> above base search of openDCIM* and return only the openDCIM groups.
>
>
> you also need to define the full path to the group in AD
>
>
> In our case
>
> CN=openDCIM_ReadAccess,OU=Security Groups,OU=Top-Level,DC=example,DC=com
>
>
> so this is basically saying our folder structure is
>
>
> Example.com
>
> Top-Level
>
> Security Groups
> openDCIM_ReadAccess
>
>
>
> Obviously change this to suit your AD environment you can easily find this
> info using the ADSI console on your AD server
>
>
> Hope this help
>
>
> IF you have any more questions let me know
>
>
> Regards
>
>
> Robert
>
>
>
>
>
>
>
>
>
>
>
>
> On 22 March 2018 at 06:15, Nick Noot-Davies <***@gmail.com>
> wrote:
>
> Cool. I wonât send my page in then. Iâll let you walk people through it as
> itâs more supportable than a custom page :)
>
> Nick Noot-Davies
> Sent from my iPhone
>
> On 21 Mar 2018, at 19:14, robert saunders <***@gmail.com>
> wrote:
>
>
> LDAP works with out making any changes to the page it can be one from the
> ldap settings page
>
> I'll try to walk you through it when I get to work
>
> On 22 Mar 2018, at 5:06 am, Paul Collado <***@hotmail.com> wrote:
>
> Thank you, I'll wait for your response.
>
>
> Paul Collado
>
>
> ------------------------------
> *From:* Discussion <discussion-***@list.opendcim.org> on behalf of
> nick noot-davies <***@gmail.com>
> *Sent:* Wednesday, March 21, 2018 1:46 PM
> *To:* ***@list.opendcim.org
> *Subject:* Re: [Discussion] openDCIM-18.01 Officially Released
>
> I have AD LDAP working, i made some changes to the page. I am happy to
> share this page. However i manage to struggle through with php so i cant
> guarantee its the best in the world, it works for us and hopefuly will for
> others.
>
> Ill sanitize the code ive added and comment it and then email it
>
> On 21 March 2018 at 17:33, Scott Milliken <***@opendcim.org>
> wrote:
>
> Yeah, you find someone to write it and it can happen. I wrote the
> existing LDAP login - and just barely. I have no AD infrastructure to
> test against, and have no AD knowledge.
>
> Scott
>
> On Wed, Mar 21, 2018 at 1:05 PM, Paul Collado <***@hotmail.com>
> wrote:
>
> Thank you very much Scott,
>
>
> We appreciate your efforts and dedication to making this platform as
> useful and robust as it is.
>
>
> Do you have any updates on this new upgrade to LDAP integration to MS AD?
>
>
> Thanks,
>
>
> Paul Collado
>
>
> ------------------------------
> *From:* Discussion <discussion-***@list.opendcim.org> on behalf of
> Scott Milliken <***@themillikens.com>
> *Sent:* Wednesday, March 21, 2018 12:57 PM
> *To:* ***@list.opendcim.org
> *Subject:* [Discussion] openDCIM-18.01 Officially Released
>
> All,
> We've had a few weeks of testing, with a few bugs reported to us and
> fixed, but all in all it has been relatively quiet, even though we know of
> several already running the code in production. So, without further
> delay, I've pushed out release 18.01.
> If you have a medium to large sized installation, you should see
> enormous performance increases. As a benchmark, my installation of 8
> rooms / ~ 1000 cabinets of equipment, it would take roughly 6-8 seconds to
> fully render a cabinet view in version 4.5. It is now down to roughly 800
> ms. Smaller sites won't notice much difference, but the larger ones will
> see the dramatic increase. We've sped it up by caching several things -
> so I will warn you, it can take a considerable amount of time to do this
> upgrade. There is a gauge on the screen, though, so you will be able to
> see that it's running. Let it finish. If you happen to interrupt it,
> you can manually rebuild the image cache after exiting the upgrade mode -
> go into Template Management -> Device Image Management, and click on
> "Rebuild Image Cache".
> The demo site has been upgraded.
>
> https://www.opendcim.org/downloads.html
> openDCIM Downloads <https://www.opendcim.org/downloads.html>
> www.opendcim.org
> The openDCIM Foundation, Inc is a not-for profit corporation formed to
> manage the project and cover any expenses related to hosting and
> publicizing openDCIM.
>
>
> Changes in 18.01
>
> - Nomenclature for releases has changed to YY.nn, as this ends the
> debate over what warrants a major vs minor number change
> - Added some error logging for LDAP authentication failures
> - Added in more bulk import functions - Users and Departments
> - Converted some more reports over to Excel as we move away from PDF
> reports
> - Network map updated to differentiate between front and rear ports
> - Updated DataTables to the latest compatible release
> - HUGE performance improvements by caching device imaging and the
> navigation tree HTML, rather than building on the fly
> - Other bug fixes, as usual.
>
>
> Scott
>
>
> _______________________________________________
> Discussion mailing list
> ***@list.opendcim.org
> If you want to unsubscribe, click below:
> https://list.opendcim.org/mailman/listinfo/discussion
>
>
>
> _______________________________________________
> Discussion mailing list
> ***@list.opendcim.org
> If you want to unsubscribe, click below:
> https://list.opendcim.org/mailman/listinfo/discussion
>
>
> _______________________________________________
> Discussion mailing list
> ***@list.opendcim.org
> If you want to unsubscribe, click below:
> https://list.opendcim.org/mailman/listinfo/discussion
>
> _______________________________________________
> Discussion mailing list
> ***@list.opendcim.org
> If you want to unsubscribe, click below:
> https://list.opendcim.org/mailman/listinfo/discussion
>
>
> _______________________________________________
> Discussion mailing list
> ***@list.opendcim.org
> If you want to unsubscribe, click below:
> https://list.opendcim.org/mailman/listinfo/discussion
>
>
>
> _______________________________________________
> Discussion mailing list
> ***@list.opendcim.org
> If you want to unsubscribe, click below:
> https://list.opendcim.org/mailman/listinfo/discussion
>
>
>
> _______________________________________________
> Discussion mailing list
> ***@list.opendcim.org
> If you want to unsubscribe, click below:
> https://list.opendcim.org/mailman/listinfo/discussion
>
>
>
> _______________________________________________
> Discussion mailing list
> ***@list.opendcim.org
> If you want to unsubscribe, click below:
> https://list.opendcim.org/mailman/listinfo/discussion
>
>
>
> _______________________________________________
> Discussion mailing list
> ***@list.opendcim.org
> If you want to unsubscribe, click below:
> https://list.opendcim.org/mailman/listinfo/discussion
>
> _______________________________________________
> Discussion mailing list
> ***@list.opendcim.org
> If you want to unsubscribe, click below:
> https://list.opendcim.org/mailman/listinfo/discussion
>