Issue with LDAP Authentication zabbix 2.0.6

[cyber_geek5]

I am trying to configure LDAP authentication on Zabbix 2.0.6
After entering all the required data under Admin - Authentication - default authentication - LDAP

LDAP host
Port
Base DN
Search attribute
Bind DN
Bind password
Test authentication
[must be a valid LDAP user]
Login : Logging with with a valid LDAP ID
User password

When i click on save or test the screen blanks and i do not any get any confirmation if it went through . the LDAP user exists in Zabbix repository as well. Am i missing something .

[cyber_geek5]

Noticed that the php-ldap module was missing and after installing it tried to configure LDAP authentication

Presented with these errors

ldap_bind(): Unable to bind to server: Can't contact LDAP server [include/classes/class.cldap.php:115]
LDAP: cannot bind by given Bind DN.
Login name or password is incorrect

Have ensure the LDAP server is listening on the required port , bind DN , base DN are proper etc

Any help

[harmonica]

Hi

Post your LDAP authentication configuration.

[cyber_geek5]

LDAP host : 10.x.x.x
Port: 4001
Base DN : ou=internal,dc=aa,dc=com
Search attribute : uid
Bind DN : uid=T1013455,ou=functional,ou=internal,dc=aa,dc=co m
Bind password
Test authentication

[must be a valid LDAP user]
Login : T1013455 ( Logged into zabbix with this user and it also exists as a valid ID in LDAP )
User password

[cyber_geek5]

LDAP Authentication configuration from the Zabbix GUI went through successfully.

To test this
------------
I created a user in Zabbix similar to the one that existed in LDAP
But when i login using the ldap id ( id exists in zabbix as well ) with the ldap password it fails.

What am i doing wrong
Any clues

[cyber_geek5]

LDAP Authentication is not working . The user exists in zabbix as well as in LDAP
But when LDAP authentication method is chosen and when the user tries to logi to Zabbix console using his ldap password "access is denied" ,

I turned on debug mode = 4 in zabbix_server.conf to see of there any logs for LDAP authentication but found none

Any help

[Heilig]

Read manual and try "LDAP host: ldap://10.x.x.x".
Also, check that port 4001 on the LDAP server is available from zabbix server (telnet LDAP_IP 4001).

[cyber_geek5]

Verified that the ldap server is listening on port 4001
and able to telnet to ldap server on port 4001 from zabbix

From Administration - Authentication screen LDAP authentication goes through sucessfully .

The issue occurs when a ldap user logins in from the zabbix console using his ldap password . Says access denied

[cyber_geek5]

Harmonica , heilig

Thanks for all your inputs

LDAP authentication is successful and ldap logins are working now.

I certainly want to know if there is a way to enable both Internal and LDAP authentication at the same time for more flexibility

[heaje]

Yes, you can enable both authentication types. When setting up user groups, you can specify internal authentication as one of the settings. If you enable internal authentication for a user group, any users in that group will be authenticated internally.

[WolfFlight]

same issue

I get the LDAP issues as noted by the previous posts.

php-ldap is installed and used...

my ldap administrator can see the attempts to connect.

the user is me and my password is the ldap one I use otherwise

for some reason Zabbix will not connect to our LDAP server. Wonder how the previous poster managed to finally get it working.

[Heilig]

my ldap administrator can see the attempts to connect

The user has enough permissions in LDAP?

for some reason Zabbix will not connect to our LDAP server. Wonder how the previous poster managed to finally get it working.

Can you show settings?

[PhilSynek]

Hi,

I have the same issue:

ldap_bind(): Unable to bind to server: Invalid credentials [authentication.php:116 → CLdapAuthValidator->validate() → CLdap->checkPass() → ldap_bind() in /usr/share/zabbix/include/classes/class.cldap.php:112]
LDAP: cannot bind by given Bind DN.
Login name or password is incorrect!

My settings:
LDAP host= ldap://dc.domain.int
Port= 389
Base DN= DC=domain,DC=int
Search attribute= sAMAccountName
Bind DN= CN=SYS_zabbix,OU=Accounts,OU=Specials,DC=domain,DC =int

I created my AD user as new user in zabbix with the authentication mode set to default. While logged in with a local backup user, with super admin rights, I try to change the authentication. But I get the error message above.

Can someone help me?

[[email protected]]

LDAP authentication error

I have the same error i wonder how you got it working :
I am running version zabbix 2.2.4
LDAP configuration is :
LDAP Host ldaps://services.fnal.gov
Port 636
Base DN dc=services,dc=fnal,dc=gov
Search attribute sAMAccountName
Bind DN*
cn=cd-srv-zabbix,ou=FermiServiceAccounts,dc=services,dc=fnal ,dc=gov
Bind Password*
Server has new DigiCertCA.crt and ldap.conf pointing to the correct directory and php-ldap-5.3.3-27.el6_5.1.x86_64 installed
telnet services.fnal.gov 636 opens the port also