Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Active Directory passthrough auth

After setting up AD pass through auth according to the admin guide instructions (8.5.1 sp3) the authentication works perfectly, but I'm seeing 2 problems and was wondering if anyone has run across the same thing and has a suggestion of what to try.

1) I get automatically logged in as my AD user, but want to login as the admin user - click logout, get the orion website login page, enter correct admin credentials... and I'm logged in as my AD user. I have seen this work (to be able to logout/login as admin) in other environments - what's the difference? As far as I can tell, the IIS/Orion AD pass through setup is identical, since it is exactly what's in the admin guide - on the orion side, impersonate is set to true, in IIS, enable anon access is not checked, integrated windows auth is checked.

2) My AD authenticated Orion user has admin rights and Yes to the customize views user option. However, most (but not all) resources are missing the "Edit" button/link for customization. For example, I have a nodes list and map on the home page - the nodes list shows the Edit, the map does not.

Thanks!

Find more posts tagged with

Accepted answers

All comments

tdanner

#1 (and maybe #2 as well) sounds like a bug that was fixed in 8.5.1 SP3. What version are you running?

kbenton

8.5.1 sp3. It was not a new install at sp3 - I have patched it up to sp3 (not sure if that has anything to do with anything, but thought I would throw it out there...)

thanks!

tdanner

Better open a support ticket in that case.

kbenton

Ok, I figured out what this is. The 8.5.1 admin guide copy I have saved locally (downloaded in march, which was sp3, right?) says to set impersonate to true in the inetpub\solarwinds\web.config file. I am running 8.5.1 sp3, but when I checked the most recent doc copy (which is for v9, not 8.5.1) on the website, the file to change is now inetpub\solarwinds\orion\custom.config. Sure enough, I have a custom.config and it has the impersonate setting in it, set to false, which I'm sure is overriding the web.config setting. On changing that, everything resolved. I also noticed that redeploying the website from the config wizard resets impersonate back to false. When impersonate is false in web.config and true in custom.config, I get a website error. The other way around, authentication works correctly, but these issues exist. So if you redeploy the website via the config wizard, verify the impersonate setting is correct afterwards.

Nicki

Question:

When you set impersonate to true, what exactly is occurring here?

(These are the questions that are asked of me...)

Thank you.