Yeah I know, I’m usually not one to use a non-LTS ubuntu installation. But I needed to utilize some of the newest tech, so it happened to be on my test machine. And I needed Cacti and LDAP authentication.<\/p>\n
Either way, do the usual updates first:<\/strong> Install Cacti from the repo (good enough, although AZ would tell me not to)<\/strong> Configure Cacti<\/strong> To reset the admin account password back to the default of ‘admin’:<\/strong><\/p>\n LDAP Settings:<\/p>\n I should note that these work on a Server 2012 R2 Std Active Directory domain with Cacti running version 0.8.8h PHP 7.0.22. Server: FQDN or IP of a domain controller Group Distinguished Name (DN): CN=Information Technology,OU=Groups,OU=LocalUsers,DC=DOMAINNAME,DC=LOCAL Search Base: OU=LocalUsers,DC=DOMAINNAME,DC=LOCAL I should note that the Search Filter could replace “userPrincipalName” with sAMAccountName, but this one worked for me. I should also note you should have a service account created for your LDAP lookups – I create a new svc account for each one (svc.cactildap@domain.tld) so if account lockouts happen etc, AND I have this logon to permissions set to just the domain controllers and my cacti box.<\/p>\n I then opened my browser to the http:\/\/theserversIP\/cacti and used my login svc.cactildap with the password to test. I just used my bsdman account and it worked – no need to add the domain\\user or user@domain.<\/p>\n","protected":false},"excerpt":{"rendered":" Yeah I know, I’m usually not one to use a non-LTS ubuntu installation. But I needed to utilize some of the newest tech, so it happened to be on my test machine. And I needed Cacti and LDAP authentication. Either way, do the usual updates first: apt-get update && apt-get dist-upgrade Install Cacti from the … Continue reading Install Cacti Ubuntu 17.04<\/span>
\napt-get update && apt-get dist-upgrade<\/code><\/p>\n
\napt-get install cacti-spine<\/code>
\nThere are some wizard questions it asks here, just fill them out.
\napt-get install php-ldap<\/code><\/p>\n
\nhttp:\/\/theserversIP\/cacti
\nLogin with your admin account – in my case I forgot I had set the password to my root one, so that’s what I used.<\/p>\nmysql -u root -p cacti<\/code>
\nupdate user_auth set password=md5('admin') where username='admin';<\/code>
\nProfit<\/p><\/blockquote>\n
\n(Configuration > Settings > Authentication)
\nSelect LDAP Authentication<\/code>
\nI picked Guest user “guest” and User Template “admin” because I just wanted to get this to work for testing – just allowing all users admin access is NOT a good idea.<\/p><\/blockquote>\n
\nPort Standard: 389
\nPort SSL (not used): 636
\nProtocol Version: Version 3
\nEncryption: None (plain text ftw)
\nReferrals: Disabled
\nMode: Specific Searching
\nDistinguished Name (DN): blank
\nRequire Group Membership: unchecked<\/p>\n
\nGroup Member Attribute: member
\nGroup Member Type: Distinguished Name<\/p>\n
\nSearch Filter: (&(objectclass=user)(objectcategory=user)(userPrincipalName=
\nSearch Distinguished Name (DN): svc.cactildap@domainname.local (this is your ldap service account)
\nSearch Password: ******* (this is your ldap service account password)<\/p><\/blockquote>\n