Foglight LDAP Group Integration for Virtualization Administrators

A customer recently asked if it was possible for Foglight to integrate with Active Directory.  To take it a step further, use the Member(s) of a existing Active Directory Group to access Foglight and when the Group Member(s) login, they can only see VMware related dashboards.

In Foglight,

Go-To Administration ->Users & Security Management -> Configure Directory Services

  • Edit and Enter the Location of the Nearest and Secondary LDAP server URLs
  • Edit and Enter the Settings (screenshots below)

          - The comma is required at the beginning of the LDAP query suffix.

          - Use the second and/or third group namespace(s) if your Groups are nested at that layer.

          - Always enter and confirm the password when making changes to Settings.

  • Distinguished name of the service account

          - This can be any account that has 'Read-Access' to Active Directory

  •  This is a view of my Active Directory Group and Members

  • LDAP query suffix
  • The scope(s) to search for groups
  • The LDAP context for user searching

 

  • Now, lets test by logging in with one of the Member(s) in the Active Directory Group

  •  The error below is By-Design because the User nor the Active Directory Group has any Roles to access Foglight.

  •  Login to Foglight using the Administrator Account

           - Go-To Administration -> Users & Security Management -> User Management -> Groups -> LDAP Groups...

           - You will see the Group imported from Active Directory 

           - Select the Group and 'Add Groups to be visible'

 

  • Assign the Active Directory Group the (6) Roles below.

  • Now, lets have 'eduardk' attempt to login again.
  • 'eduardk' logged in successfully and has access to the VMware Dashboards.

  • Now, have the remaining users in the LDAP Group, test logging into Foglight.
  • In Foglight (User Management), you will be able to see the User(s), Group(s) and Role(s).

 

For more information, visit our Foglight for Virtualization product page.

Anonymous