Connecting Shinken Enterprise to Active Directory will allow you to automatically detect your windows servers.
You can enable it by editing the configuration file /etc/shinken/modules/activ-dir-import.cfg
All you need is to set the following parameters:
| Property | Default | Description |
|---|---|---|
| url | ldap://YOURDCFQDN/ | URL of your Active Directory server. |
| base | dc=YOUR,dc=DOMAIN,dc=com | Base OU for your objects discovery. |
| hosts_base | OU=DataCenter Servers,dc=YOUR,dc=DOMAIN,dc=com | Base OU for the hosts discovery. |
| contacts_base | dc=YOUR,dc=DOMAIN,dc=com | Base OU for the contacts discovery. |
| username | SHINKEN@YOURDOMAIN.com | Username used to connect to the Ldap server. |
| password | PASSWORD | Password used by the user to connect to the Ldap server. |
This connection information will allow the source to connect to your Active Directory. It only needs a « read only » account.
Shinken Enterprise’s main purpose is monitoring servers, therefore we suggest you not load all your Active Directory elements like computers. |
This source also includes other parameters that will allow you to automatically “tag” your servers based on your active directory information:
Contacts to load can be easily filtered with the contacts_filters parameter.
Tagging hosts based on their OU (Organization Unit) is possible. This is done with the hosts_tag_* parameters.
For example, if you want to add the exchange tag to all the servers which are below the OU=Email Collaboration Servers,OU=DataCenter Servers,DC=YOUR,dc=DOMAIN,dc=com OU,
you can set this parameter:
hosts_tag_exchange OU=Email Collaboration Servers,OU=DataCenter Servers,DC=YOUR,dc=DOMAIN,dc=com
Setting up ldap object matching with the hosts_match_* parameters is also possible.
For example, if you want to add the enterprise tag to all the ldap object that match the string Enterprise in their operatingSystem property,
you only need to setup:
hosts_match_operatingSystem_enterprise Enterprise
This also works with groups.
For example, if you want to add the domain-admins tag to the users that are in the CN=Domain Admins,CN=Users,DC=YOUR,dc=DOMAIN,dc=com OU
setup:
contacts_match_memberOf_domain-admins CN=Domain Admins,CN=Users,DC=YOUR,dc=DOMAIN,dc=com
If presents into the Ldap objects, some fields are automatically set on your host objects:
| Host data | Ldap field |
|---|---|
| _OS | operatingSystem |
| _OS_SP | operatingSystemServicePack |
| _IP | if the server can resolve the PTR dNSHostName entry |
| _FQDN | if the server can resolve the dNSHostName entry |