LDAP Monitoring
LDAP Authentication Sensor checks the user authentication process via LDAP that is used by directory services such as MS Active Directory.
LDAP Authentication Sensor
The sensor connects to LDAP (Lightweight Directory Access Protocol) server and tries to bind using a specified Distinguished Name and password.
LDAP Bind operation is used to authenticate clients (and the users or applications behind them) to the directory server.
Sensor alerts when bind operation cannot be completed (e.g., because specified credentials are invalid).
The sensor supports both plaintext and SSL/TLS connections and LDAP v2 and v3 protocols. Bind operation can be performed with a simple (plain text) authentication mechanism or using SASL (Simple Authentication and Security Layer) - Digest (MD5), NTLM/Negotiate, and Kerberos can be used.
Notice
Distinguished Name is commonly the string that uniquely identifies an entry in the Directory Information Tree, like:
cn=John Doe,ou=people,dc=example,dc=com
For Windows Active Directory, use either :
Domain\user
or
user@domain
Alerts:
- Connection error
- Authentication error
Counters
- Response time