Skip to content

An exporter to monitor health of service accounts in Active directory

Notifications You must be signed in to change notification settings

sumeshkanayi/prometheus_ad_exporter

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

37 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Usage:

This exporter will get triggered when the metrics end point is scrapped by prometheus or through a get call

User account password should be mentioned as an environment variable BIND_PASSWORD

export BIND_PASSWORD="password"

make sure that user parameter following the format user@domainFQDN


./ad_exporter -h

Usage of ./ad_exporter:
  -exporterPort string
    	Port on which the exporter should listen (default "2134")
  -port string
    	LDAP Server port (default "389")
  -server string
    	LDAP Server Hostname or port (default "ad")
  -timeout duration
    	How long should the exporter wait before exporter times out (default 5s)
  -user string
    	User account to be monitored (default "user@dmainFQDN")


  Metrices exported examples:

  LDAP server is not reachable:-

  ldap_connection_status_gauge{ldap_server="ad:389",user_name="gitlab"} 1


  LDAP server is working fine:-

  ldap_connection_status_gauge{ldap_server="ad:389",user_name="gitlab"} 0


  User account password is expired:-

  password_expired_status_gauge{ldap_server="ad:389",user_name="gitlab"} 1

  User account password is valid:

  password_expired_status_gauge{ldap_server="ad:389",user_name="gitlab"} 0




  User account is disabled:-

  account_disabled_status_gauge{ldap_server="ad:389",user_name="gitlab"} 1

  User account is enabled:-

  account_disabled_status_gauge{ldap_server="ad:389",user_name="gitlab"} 0

  User account active (Not locked):-

  account_lockout_status_gauge{ldap_server="ad:389",user_name="gitlab"} 0

  User account is currently locked :-

  account_lockout_status_gauge{ldap_server="ad:389",user_name="gitlab"} 1

  Exporter trying to connect with correct password:-

  credential_validation_status_gauge{ldap_server="ad:389",user_name="gitlab"} 0

  Exporter trying to connect with wrong password:-

  credential_validation_status_gauge{ldap_server="ad:389",user_name="gitlab"} 1


About

An exporter to monitor health of service accounts in Active directory

Resources

Stars

Watchers

Forks

Packages

No packages published