Change attribute in LDAP auth
Hello!
Most of our services are connected to LDAP and users use their email addresses as logins to those systems.
I'm trying to change authentication method in Zabbix. I've succeeded with testing connection to LDAP with search attribute "mail", but no one can login to Zabbix using user's email or sAMAccountName. Somewhere in the web I've read that Zabbix uses login + BaseDN to build username and then it makes request to LDAP server. So, in case I'll enter [email protected] (in login page) as user's login, Zabbix will try to find user [email protected]@example.com in LDAP directory.
The thing is that we have single base DN example.com but email addresses are located at different domains, like [email protected], [email protected] and so on.
So, the question is: is it possible to change Zabbix's internal search attribute?
P.S. We're using Microsoft Active Directory as LDAP server.
Thank you.
Most of our services are connected to LDAP and users use their email addresses as logins to those systems.
I'm trying to change authentication method in Zabbix. I've succeeded with testing connection to LDAP with search attribute "mail", but no one can login to Zabbix using user's email or sAMAccountName. Somewhere in the web I've read that Zabbix uses login + BaseDN to build username and then it makes request to LDAP server. So, in case I'll enter [email protected] (in login page) as user's login, Zabbix will try to find user [email protected]@example.com in LDAP directory.
The thing is that we have single base DN example.com but email addresses are located at different domains, like [email protected], [email protected] and so on.
So, the question is: is it possible to change Zabbix's internal search attribute?
P.S. We're using Microsoft Active Directory as LDAP server.
Thank you.