2

I am trying to configure Openvas 9 to use LDAP, for the login to the Greenbone software. It appears as based off of other threads, this issue with LDAP in unresolved unless I am seriously mistaken.

My problems is that I am trying to allow multiple users based on active directory, access to Greenbone.

However, no configuration of mine seems to be working.

This is the output when I attempt to login with a user created and specified for LDAP use in Greenbone:

 lib  serv: DEBUG:2016-11-15   19h47.35 utc:9786:     Shook hands with peer.
 md   main: DEBUG:2016-11-15   19h47.35 utc:9786:     sql_open: db open, max retry sleep time is 0
 lib  ldap: WARNING:2016-11-15 19h47.35 utc:9786: StartTLS failed, trying to establish ldaps connection.
 lib  ldap: WARNING:2016-11-15 19h47.35 utc:9786: LDAP Authentication failure: Can't contact LDAP server
 lib  ldap: DEBUG:2016-11-15   19h47.35 utc:9786: Could not bind to ldap host my.host.example:389
 md    omp: WARNING:2016-11-15 19h47.35 utc:9786: Authentication failure for 'myuser' from 127.0.0.1

As shown, the LDAP cannot bind to my host, I am not sure why and am curious as to how I am supposed to configure LDAP correctly, allowing created users to login using AD credentials.

Steve G
  • 21
  • 1
  • 3
  • You write '...no configuration of mine seems to be working.'. Could you add some details about your configuration? Or what you assume to be part of the problem. Could you add some of those reference links? – John K. N. Nov 16 '16 at 12:01
  • Maybe one of this pages helps? http://docs.greenbone.net/GSM-Manual/gos-4/en/gui_administration.html#ldap http://docs.greenbone.net/GSM-Manual/gos-4/en/gui_administration.html#ldap-with-ssl-tls – casheeew Jun 29 '17 at 14:51

1 Answers1

0

the error shows that both your ldap startls and your ldaps connections to your AD server are not working.

To get this to work you typically need to use certificates on your domain controllers, and you need to have the certificate authority file that signed those certificates on your openvas server.

Once you fix that, then you should be able to authenticate to your AD.

natxo asenjo
  • 5,641
  • 2
  • 25
  • 27