Fallback auth

[maxxer]

Hi.
I've set up zabbix 1.8.1 with LDAP auth, and works great.
I'd now like to add some read-only users, but I'd like to add them only to internal Zabbix auth, without touching LDAP.

Is it possible to use a "fallback" auth, so that if it fails to check on LDAP it will do on internal, something like PAM does?

thanks

[Alexei]

You could have a group of users using internal authentication. Therefore all users will be authorized via LDAP, but the group of users will always use internal authontication regardless of availability of the LDAP.

[maxxer]

hi. thanks for your reply, but I didn't understand how to do that.
I checked both users and groups, and couldn't find a way to tell "them" to use internal auth instead of ldap.

also, when ldap auth is enabled there's no way to set user password, when editing the user.
I'm using z 1.8.1.

thanks

[Alexei]

In configuration of a user group set 'GUI access' to Internal to make all users of the group authenticate by passwords from the Zabbix database.

Yes, you cannot change your LDAP password from Zabbix.

[maxxer]

awesome! thanks!!!