User logon using Active Directory integration

The Active Directory integration feature lets a user login to the management interface using Windows login credentials by pointing his browser to a special login URL. Before you start using this feature you should be aware that this login method imposes a serious overhead for each page request and is dependant on the AD having a low response time.

Note: This feature is only supported on x32 systems.

Enabling AD login and configuring users

1. Login to Network Monitor the usual way and open the user list.
2. Open the property page for the user you want to enable AD login for.
3. In the Additional field enter the Windows user name in the format mywindowsdomain\mywindowsusername.
   • If you do not have a domain you can replace the domain name with your workgroup name.
   • Optionally add multiple windows accounts on a new line in the Additional field. This makes it possible to get a whole group of Windows users to use the same user account.
   • Do not include any other text in the Additional field.
4. In the init.cfg file enter: webserver_auth=negotiate

   Note: For Windows 2003 and earlier, use webserver_auth=ntlm.

The configuration is finished. Now the user is ready to use the AD login method. When logged on to the Windows desktop, using the registered Windows account, the user can login to the management interface by entering this URL:

http://myinmhost:8080/adlogin.xsi

During login, Network Monitor exchanges a series of packets with the browser verifying that the user is logged on as the specified Windows account. If everything works out, the user is directed to his start page.

Troubleshooting

If something goes wrong during the login, Network Monitor redirects the user to the normal login page.
Possible error causes are:

• Network Monitor can't reach the mywindowsdomain domain controller and verify that mywindowsusername is a valid windows account.
• Your browser does not support the NTLM authentication type.
• The domain controller is slow to respond to authentication, this can effect the overall interface performance greatly.
• You can only use this feature when you are in a intranet security zone.