Basic Troubleshooting for Zenoss LDAP Connections

Applies To

• Zenoss Resource Manager 5.x

Summary

LDAP issues can result in various Zenoss and connectivity issues including being unable to ping outbound LDAP servers. This KB provides some basic guidance for identifying LDAP configuration issues.

Procedures

Perform the following procedures to help identify LDAP issues.

NOTE: It is recommended as a best practice that you create a Control Center snapshot and perform a backup via the Backup/Restore tab in Control Center before adjusting your system.

Verify Resource Manager LDAP Configuration

1. In Resource Manager, navigate to Advanced > LDAP
2. Click the LDAP Configuration drop down arrow to display the current configurations.
3. Check for invalid, old, or outdated LDAP server configurations that can be removed.
4. Check for highlighted red settings on the other tabs, these indicate configuration issues.

Consult event.log Files

There are six (6) event.log files, one for each zope container.

The zope containers are named Zope/0 through Zope/5.

To examine the event.log file for each zope container, perform the following, exchanging Zope/0 with the names Zope/1 through Zope/5:

1. SSH into the Zenoss master.
2. Attach to the zope container:

   serviced service attach Zope/0

3. Change to the zenoss user:

   su - zenoss

4. Navigate to the file /opt/zenoss/log/event.log
5. View or copy the file to another location on the master for inspection.
6. Examine the file for errors and associated trace back information to assist in troubleshooting.
7. Exit the zenoss user:

   exit

8. Exit the container:

   exit

9. Repeat the process for each of the remaining five zope containers. Replace the name Zope/0 with Zope/1, Zope/2 ... through Zope/5

Verify Database LDAP Instances

To verify the LDAP instances in the database, perform the following:

1. SSH into the Zenoss master.
2. Attach to the Zope/0 container:

   serviced service attach Zope/0

3. Change to the zenoss user:

   su - zenoss

4. Copy the ldapdmd.dmd file (attached below) to the /tmp directory in the Zope/0 container.
5. Add execute permissions (+x) for the zenoss user to the file:
   /tmp/ldapdmd.dmd
6. The zendmd ldapp fetch function returns the list of configured LDAP servers configured in Zenoss Resource Manager. Run the following command:

   zendmd ldapdmd.dmd

7. Consult the output from the zendmd command. The results display the LDAP servers configured for Zenoss Resource Manager. Verify they are correct and if there is more than one configured LDAP server.

Clear Zope Cache and Verify LDAP Plugins

To clear the zope cache and verify the LDAP plugins, perform the following:

1. Navigate to the zope configuration/settings page at:

   https://<RM Host Name>/zport/acl_users/manage

2. Navigate to cache tab > cache settings
3. Click:

   purge all caches

4. Verify the LDAP plugin(s) show the correct information.