Setting LDAP or Cisco ACS credentials

Use the Configure External Authentication dialog to:

• Configure LDAP or Active Directory (AD) credentials and to configure WhatsUp Gold to connect with an Active Directory server to import group information from a Microsoft Domain Controller into WhatsUp Gold.

  -or-

• Configure Cisco ACS credentials and configure WhatsUp Gold to connect with a Cisco ACS server.

To configure WhatsUp Gold to use Windows Active Directory for authentication:

1. From the WhatsUp Gold web interface, go to Admin > External Authentication. The Configure External Authentication dialog appears.
2. Select the Active Directory / LDAP tab.
3. Enter or select the appropriate information:
   • Domain Controller or LDAP Server. Enter the Domain Controller IP address or hostname for the Domain Controller or LDAP server. If you are authenticating to an Active Directory domain, the LDAP server for your domain is a DC (domain controller).
   • Server port. Enter the port the Active Directory server uses to listen for connections (Default: 389).
   • Secure. Select this option if you want Active Directory domain or LDAP queries to be encrypted using SSL (Default port: 636).
4. In the Server Type area, select Active Directory to enable Active Directory domain credentials. The Logon Domain box is activated.
5. Enter the Active Directory Logon Domain from which you want to access and import AD groups.
6. (Optional) Click Test to open the Test dialog. The Test dialog allows you to verify that your credentials are configured correctly. For more information, see Test LDAP credentials.
7. Click Browse to open the Browse Active Directory dialog. The Browse Active Directory dialog allows you to select the AD groups you would like to map to existing WhatsUp Gold user groups. For more information, see Browse Active Directory.

   Note: Authentication for nested Active Directory groups are not supported.

8. In the Active Directory group list, select the WhatsUp Gold group you want to map to each AD group.

   Note: Before you can map AD groups to WhatsUp Gold groups, you must create the WhatsUp Gold groups using the Add User Group dialog. When you have added the WhatsUp Gold user groups you can then select the AD groups you want to map to WhatsUp Gold groups using the Browse Active Directory dialog.

   Note: When a member of an AD group logs into WhatsUp Gold using their Windows Domain credentials, they will be added as a member of the WhatsUp Gold group mapped to that AD group.

9. Click OK to save changes. WhatsUp Gold saves the Active Directory credentials and the LDAP Credentials dialog closes.

To configure WhatsUp Gold to use an LDAP server for authentication:

1. From the WhatsUp Gold web interface, go to Admin > LDAP Credentials. The LDAP Credentials dialog appears.
2. Enter or select the appropriate information:
   • Domain Controller or LDAP Server. Enter the Domain Controller IP address or hostname for the Domain Controller or LDAP server. If you are authenticating to an Active Directory domain, the LDAP server for your domain is a DC (domain controller).
   • Server port. Enter the port the Active Directory server uses to listen for connections (Default: 389).
   • Secure. Select this option if you want Active Directory domain or LDAP queries to be encrypted using SSL (Default port: 636).
3. In the In the Server Type area, select Standard LDAP to enable Active Directory domain credentials. The Authorize DN box is activated.
4. Enter the path to the container which holds the users you want to access the WhatsUp Gold web interface in Authorize DN.

   Note: The following is an example of how a specific LDAP server might CN=%s, OU=Users, o=yourdomain.net where %s is replaced by the username and password of the user.

   Note: If you are not sure about the LDAP attributes to use or the path to specify, contact your LDAP administrator or LDAP vendor.

5. (Optional) Click Test to open the Test dialog. The Test dialog allows you to verify that your credentials are configured correctly.
6. Click OK to save changes. WhatsUp Gold saves the LDAP credentials and the LDAP Credentials dialog closes.

   Note: After you have entered the LDAP credentials you can create user accounts for those users that you want to allow access by authenticating using the username and passwords that are available on the LDAP server with which you have configured WhatsUp Gold to communicate.

To configure WhatsUp Gold to use Cisco ACS for authentication:

Use the Cisco ACS tab to configure Cisco ACS credentials and to configure WhatsUp Gold to connect with a Cisco ACS server. Before configuring in WhatsUp Gold, make sure to enable the UCP interface on the respective Cisco ACS device and make sure the device uses a valid certificate.

To configure WhatsUp Gold to use Cisco ACS credentials for authentication:

1. From the WhatsUp Gold web interface, go to Admin > External Authentication. The Configure External Authentication dialog appears.
2. If not already active, select the Cisco ACS tab.
3. Enter or select the appropriate information:
   • Cisco ACS server hostname / IP address. Enter the server hostname or IP address for the Cisco ACS server.
   • Cisco ACS server port number. Enter the port the Cisco ACS server uses to listen for connections (Default: 431).
4. (Optional) Click Test to open the Test Cisco ACS Authentication dialog. The Test dialog allows you to verify that your credentials are configured correctly. For more information, see Test credentials.
5. Click OK to save changes. WhatsUp Gold saves the Cisco ACS credentials and the Configure External Authentication dialog closes.

See Also System Administration Managing WhatsUp Gold server options Using the SNMP MIB Manager Setting Cisco ACS credentials Translation Groups Managing users and groups Using the Polling Configuration Library Using the Task Library