12.2.4 Task 4: Test the user name and password configuration
In the LDAP configuration file, set defaultRole to guest for testing purposes.
You can change this value at any time.
In nms-auth-config.xml file add the following content before the usersearch element:<defaultRoles>
<role>guest</role>
</defaultRoles>
-
Save the LDAP configuration file.
-
Force NNMi to re-read the LDAP configuration file by executing the following command:
nnmldap.ovpl -reload
-
Sign in to the NNMi console with a user name and password that are defined in the directory service.
Run this test with a user name that is not already defined in the NNMi database.
-
Verify the user name and NNMi role (Guest) in the title bar of the NNMi console.
-
If user sign-in works correctly, go to step 8 of this task.
-
If user sign-in does not work correctly, continue on to step 6.
After each test, sign out of the NNMi console to clear the session credentials.
-
-
Test the configuration for one user by running the following command:
nnmldap.ovpl -diagnose NNMi-user
Replace NNMi-user with the sign-in name of an NNMi user as defined in the directory service.
Examine the command output and respond appropriately. The following are suggestions:
-
Verify that you completed correctly 12.2.3 Task 3: Configure user access from the directory service.
-
Follow the detailed configuration process in 12.3.4 User identification.
- Note
-
In mixed mode, the following message is output. However, this does not indicate a problem in operation, because the LDAP group is not referenced in mixed mode. Therefore, you can ignore the message.
!!!!!!!!!!!!!!!!!!!!!!!! NOTE !!!!!!!!!!!!!!!!!!!!!!! ! No LDAP groups found for this User Distinguished Name. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!! NOTE !!!!!!!!!!!!!!!!!!!!!!! ! LDAP Appears to be Misconfigured. See above for more information. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
-
-
Repeat steps 1 through 5 until you see the expected result when signing in to the NNMi console.
-
After you can sign in, choose your strategy:
-
If you plan to store NNMi user group membership in the NNMi database (configuring for the mixed mode), go to 12.2.9 Task 9: Clean up to prevent unexpected access to NNMi.
-
If you plan to store NNMi user group membership in the directory service (configuring for the external mode), continue on to Task 5.
-