Setup the import module
Every time you have to customize Shinken, you have to do it in the /etc/shinken-user folder.
Somes templates files are already available in this folder. You should keep them unmodified and create your source in copying them.
Creation of your own configuration files
To create your own import source, do the following :
| Code Block | ||
|---|---|---|
| ||
cd /etc/shinken-user/source-data
cp -r source-data-active-directory-sample source-data-active-directory |
Your import source configuration files are now ready to be modified according to your Active Directory Infrastructure.
Enable the activ-dir-import source
- Edit the file /etc/shinken/sources/activ-dir-import.cfg
- Set Enabled to 1
You can find the following parameters in the source file :
| Property | Example | Description |
|---|---|---|
| source_name | active-dir | Name of this source. Must be unique. |
| order | 2 | Order in the merge algorithm of this source data. Look in the Synchronizer page for more information about it. |
| import_interval | 5 | Launch this source every import_inverval minutes. |
| modules | active-dir | |
| enabled | 0 | |
| description | This source is about loading hosts from active directories |
Configure the Active Directory module
Connection configuration
Import rules configuration
Mapping rules
configuration
To define a Active Directory source:
- Configure the module in the file /etc/shinken/modules/activ-dir-import.cfg
to define the behaviour of the module - Then configure the source in the file /etc/shinken/sources/activ-dir-import.cfg
to enable the source and call the module configured in step 1. - Then you must declare the Active Directory source in the file /etc/shinken/synchronizers/synchronizer-master.cfg.
| title | On this page |
|---|
sources/activ-dir-import.cfg
| |||||||||||||||||||||||||||
modules/activ-dir-import.cfgUpdate these parameters in the cfg file:
| |||||||||||||||||||||||||||
This connection information will allow the source to connect to your Active Directory. It only needs a « read only » account. | |||||||||||||||||||||||||||
| |||||||||||||||||||||||||||
Filtering and tagging | |||||||||||||||||||||||||||
This source also includes other parameters that will allow you to automatically “tag” your servers based on your active directory information:
Contacts to load can be easily filtered with the contacts_filters parameter. Tagging hosts based on their OU (Organization Unit) is possible. This is done with the hosts_tag_* parameters. | |||||||||||||||||||||||||||
For example, if you want to add the exchange tag to all the servers which are below the OU=Email Collaboration Servers,OU=DataCenter Servers,DC=YOUR,dc=DOMAIN,dc=com OU, you can set this parameter:
Setting up ldap object matching with the hosts_match_* parameters is also possible.
For example, if you want to add the enterprise tag to all the ldap object that match the string Enterprise in their operatingSystem property, you only need to setup :
This also works with groups. For example, if you want to add the domain-admins tag to the users that are in the CN=Domain Admins,CN=Users,DC=YOUR,dc=DOMAIN,dc=com OU, setup :
| |||||||||||||||||||||||||||
Custom fields and host templates setting | |||||||||||||||||||||||||||
If presents into the Ldap objects, some fields are automatically set on your host objects: | |||||||||||||||||||||||||||
| |||||||||||||||||||||||||||
| Property | Default | Description |
|---|---|---|
| url | ldap://YOURDCFQDN/ | URL of your Active Directory server. |
| base | dc=YOUR,dc=DOMAIN,dc=com | Base OU for your objects discovery. |
| hosts_base | OU=DataCenter Servers,dc=YOUR,dc=DOMAIN,dc=com | Base OU for the hosts discovery. |
| contacts_base | dc=YOUR,dc=DOMAIN,dc=com | Base OU for the contacts discovery. |
| username | SHINKEN@YOURDOMAIN.com | Username used to connect to the Ldap server. |
| password | PASSWORD | Password used by the user to connect to the Ldap server. |