Unable to Authenticate After Upgrade

[valen_tino]

Greetings,

I have Zabbix 2.0.2 running on RHEL 6.3 X64 VMWare VM which I cloned and shutdown (so I have a working copy in case things go wrong). I had LDAP authentication enabled for all users. I shut down all services and upgraded to Zabbix 2.0.4 with

./configure --enable-server --enable-agent --with-mysql --with-net-snmp --with-libcurl

. This ran fine.

When I restarted the services and tried to log into the Web UI, I cannot seem to get in with any ID that I use.

Am I missing something here? Any leads?

Here is some info of the setup:

MySQL:
+-------------------------+---------------------+
| Variable_name | Value |
+-------------------------+---------------------+
| protocol_version | 10 |
| version | 5.1.61 |
| version_comment | Source distribution |
| version_compile_machine | x86_64 |
| version_compile_os | redhat-linux-gnu |
+-------------------------+---------------------+

Apache:
Server version: Apache/2.2.15 (Unix)
Server built: Feb 7 2012 09:50:11

PHP:
PHP 5.3.3 (cli) (built: May 3 2012 17:33:17)
Copyright (c) 1997-2010 The PHP Group
Zend Engine v2.3.0, Copyright (c) 1998-2010 Zend Technologies

Thanks in advance!!

[heaje]

./configure --enable-server --enable-agent --with-mysql --with-net-snmp --with-libcurl

The manner in which the Zabbix server is compiled won't matter. LDAP authentication in Zabbix has everything to do with PHP and how authentication in the frontend was configured. Did you create a new database for Zabbix to point at that is no longer configured to allow LDAP authentication?

PHP:
PHP 5.3.3 (cli) (built: May 3 2012 17:33:17)
Copyright (c) 1997-2010 The PHP Group
Zend Engine v2.3.0, Copyright (c) 1998-2010 Zend Technologies

What modules are enabled in PHP? Did your PHP configuration change? Specifically, is the PHP ldap module loaded? In RedHat, you need the "php-ldap" package available in Yum to be installed. Just restart Apache after you install it (if it's not already there). The modules that are loaded can easily be found by creating a new web page that only has the code below. After creating it, hit it in a web browser and look at what modules are loaded.

<?php
phpinfo();
?>

Also, do your Apache error logs show any errors when you try and authenticate?

[valen_tino]

Thanks heaje for your reply.

Here are answers to your questions:

Did you create a new database for Zabbix to point at that is no longer configured to allow LDAP authentication?

No. Am I supposed to do that?

What modules are enabled in PHP? Did your PHP configuration change? Specifically, is the PHP ldap module loaded?

Yes, the rpm is installed

# rpm -qa | grep php-ldap
php-ldap-5.3.3-3.el6_2.8.x86_64

Here are all the php loaded modules. Got it with the php -m command. As you can see, the ldap module is loaded. Authentication to ldap used to work prior to the upgrade.

bcmath
bz2
calendar
Core
ctype
curl
date
dom
ereg
exif
fileinfo
filter
ftp
gd
gettext
gmp
hash
iconv
json
ldap
libxml
mbstring
mysql
mysqli
openssl
pcntl
pcre
PDO
pdo_mysql
pdo_sqlite
Phar
readline
Reflection
session
shmop
SimpleXML
sockets
SPL
sqlite3
standard
tokenizer
wddx
xml
xmlreader
xmlwriter
xsl
zip
zlib

Apache logs don't indicate any ldap/authentication issues.

[tchjts1]

Not sure if this will be of any help or not:

https://www.zabbix.com/documentation/2.0/manual/web_interface/frontend_sections/administration/authentication

[heaje]

What happens if you try logging in with a user that has internal database authentication set (ie: default zabbix admin user)?