Mailing List Archive

ntopng LDAPS/RADIUS Auth
Hello,

I am trying to setup ntopng to use LDAPS on my Pro licensed version. I have put in all the parameters, but it does not work. Since I am using LDAPS and not LDAP, do I need to load certificates on the ntopng server (RHEL7)?


On my non-licensed ntopng servers I have successfully configured RADIUS authentication (well, the admin group filter doesnt work, but I dont really care) but it is only using PAP. Does ntopng support any encrypted protocols?

-Ken K.

_______________________________________________
Ntop mailing list
Ntop@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop
Re: ntopng LDAPS/RADIUS Auth [ In reply to ]
Hi,

> On 9 Nov 2019, at 22:10, Ken Kirchner <ken@kirchners.com> wrote:
>
> Hello,
>
> I am trying to setup ntopng to use LDAPS on my Pro licensed version. I have put in all the parameters, but it does not work. Since I am using LDAPS and not LDAP, do I need to load certificates on the ntopng server (RHEL7)?

Did you try and specify ldaps:// in the server address? Please, look at the ntopng output, see if there are any errors, and post them here.

You may want to follow these resources:
- https://www.ntop.org/ntopng/remote-ntopng-authentication-with-radius-and-ldap/ <https://www.ntop.org/ntopng/remote-ntopng-authentication-with-radius-and-ldap/>
- https://www.ntop.org/guides/ntopng/advanced_features/authentication.html?highlight=ldap#ldap-authentication <https://www.ntop.org/guides/ntopng/advanced_features/authentication.html?highlight=ldap#ldap-authentication>

Specifically, you can also try and test the connection using the `ldap` command if you are on linux.

Issue may be related to: https://stackoverflow.com/a/17078646

>
>
> On my non-licensed ntopng servers I have successfully configured RADIUS authentication (well, the admin group filter doesnt work, but I dont really care) but it is only using PAP. Does ntopng support any encrypted protocols?

Only PAP. If you need other protocols, please open a FR on GitHub and we will consider it.

Simone

>
> -Ken K.
>
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop