You are viewing documentation for the development version, it may be incomplete.
Join our translation project and help translate Zabbix documentation into your native language.

13 Configuring Kerberos with Zabbix


Kerberos authentication can be used in web monitoring and HTTP items in Zabbix.

This section describes an example of configuring Kerberos with Zabbix server to perform web monitoring of with user 'zabbix'.


Step 1

Install Kerberos package.

For Debian/Ubuntu:

apt install krb5-user


dnf install krb5-workstation
Step 2

Configure Kerberos configuration file (see MIT documentation for details)

cat /etc/krb5.conf 
           default_realm = EXAMPLE.COM
       # The following krb5.conf variables are only for MIT Kerberos.
           kdc_timesync = 1
           ccache_type = 4
           forwardable = true
           proxiable = true
           EXAMPLE.COM = {
Step 3

Create a Kerberos ticket for user zabbix. Run the following command as user zabbix:

kinit zabbix

It is important to run the above command as user zabbix. If you run it as root the authentication will not work.

Step 4

Create a web scenario or HTTP agent item with Kerberos authentication type.

Optionally can be tested with the following curl command:

curl -v --negotiate -u :

Note that for lengthy web monitoring it is necessary to take care of renewing the Kerberos ticket. Default time of ticket expiration is 10h.