Zabbix LDAP Authentication with FreeIPA

[mikebw]

OS: CentOS Linux release 7.2.1511
Zabbix: Zabbix 3.0.4
FreeIPA: 4.4.0

I'm trying to configure Zabbix to authenticate to our FreeIPA LDAP server, not sure why it's not working..

Message I'm getting in the Administration -> Authentication pane is:

LDAP login was not successful
Details

    LDAP: User not found.
    Login name or password is incorrect!

I have verified that this LDAP account works, as it allows me to log into the LDAP system with it.

Looking at the IPA logs I can see that Zabbix is successfully binding to the LDAP server and finding the test LDAP account.

[24/Jan/2017:22:18:53.040770538 +0000] conn=1244 fd=99 slot=99 connection from 10.x.x.x to 10.x.x.x
[24/Jan/2017:22:18:53.041027054 +0000] conn=1244 op=0 BIND dn="uid=bind,cn=users,cn=compat,dc=dev,dc=mycompany,dc=com" method=128 version=3
[24/Jan/2017:22:18:53.041764635 +0000] conn=1244 op=0 RESULT err=0 tag=97 nentries=0 etime=0 dn="uid=bind,cn=users,cn=accounts,dc=dev,dc=mycompany,dc=com"
[24/Jan/2017:22:18:53.043829760 +0000] conn=1244 op=1 SRCH base="dc=dev,dc=mycompany,dc=com" scope=2 filter="(uid=myuser)" attrs=ALL
[24/Jan/2017:22:18:53.046467536 +0000] conn=1244 op=1 RESULT err=0 tag=101 nentries=1 etime=0
[24/Jan/2017:22:18:53.047179724 +0000] conn=1244 op=2 UNBIND
[24/Jan/2017:22:18:53.047192802 +0000] conn=1244 op=2 fd=99 closed - U1

I am unable to find any event in the zabbix_server.log file that corresponds with this event.

How can I better troubleshoot why Zabbix is not authenticating with our FreeIPA server?

[viniciusferrao]

Any progress on this question? I'm looking for FreeIPA authentication too.

[yaron]

Will you consider adding that to the bug tracker?

[MMoudry]

The solution is :
put cn=compat in front of your base DN (e.g. cn=compat,dc=myipa,dc=mycompany,dc=com). The compat tree in freeIPA is specifically designed to resemble OpenLDAP. Then it works.