Next Topic

Previous Topic

Book Contents

Active Directory integration

The Active Directory integration feature lets an operator login to the management interface using Windows login credentials by pointing his browser to a special login URL. Before you start using this feature you should be aware that this login method imposes a serious overhead for each page request and is dependant on the AD having a low response time.

Enabling AD login and configuring operators

  1. Login to Network Monitor the usual way and open the operator list
  2. Open the property page for the operator you want to enable AD login for.
  3. In the field Additional info enter the Windows user name in the format mywindowsdomain\mywindowsusername. If you do not have a domain you can replace the domain name with your workgroup name.
  4. (Optional) You can add additional windows accounts on a new line in the Additional info field. This makes it possible to get a whole group of Windows users to use the same operator account.
  5. In the init.cfg file enter: webserver_auth=ntlm

The configuration is finished. Now the operator is ready to use the AD login method. When logged on to the Windows desktop, using the registered Windows account, the operator can login to the management interface by entering this URL:

http://myinmhost:8080/adlogin.xsi

During login, Network Monitor exchanges a series of packets with the browser verifying that the user is logged on as the specified Windows account. If everything works out, the operator is directed to his start page.

Troubleshooting

If something goes wrong during the login, Network Monitor redirects the user to the normal login page.
Possible error causes are:

  • Network Monitor can't reach the mywindowsdomain domain controller and verify that mywindowsusername is a valid windows account.
  • Your browser does not support the NTLM authentication type.
  • The domain controller is slow to respond to authentication, this can effect the overall interface performance greatly.
  • You can only use this feature when you are in a intranet security zone.