Page History

...

If you take a look at the cloustack documentation LDAP section you will notice various api API calls. I initially thought that you somehow had to somehow attach this API call to each user in order to let them authenticate with the password stored in AD/LDAP. Instead, the api API call actually configures the management service so LDAP authentication would work, must like other products that have integrated LDAP auth.

...

All the LDAP examples in the documentation query the api API on port 8096, you will find that this will not work out of the box. (This is the port to access the API without authentication as explained here.)

1. Goto your cloudstack management interface
2. Global Settings
   1. set integration.api.port to 8096
   2. restart cloud-management service
3. Test connection to api
   1. curl http://cloudstack:8096/api?command=listHosts^{Image Removed}

...

Disabling MD5 hash

This is a workaround for bug bug#here CS-14680 you cannot authenticate to AD/LDAP without disabling this.

...

[root@cloudstack scripts]# cat /usr/share/cloud/management/webapps/client/scripts/sharedFunctions.js | grep md5var 
md5Hashed = true;
var md5HashedLogin = false;
[root@cloudstack scripts]# 

Restart management services

• service cloud-management restart

If you need to support both LDAP auth and the internal MySQL database there is also a recommended patch in CS-16325.