Zabbix LDAP Authentication

[evangoulden]

I am currently trialing Zabbix and trying to setup LDAP authentication using the Zabbix appliance version 3.2.3
I have set all the LDAP information correctly and during testing i am using a domain admin account to bind with LDAP (this is just for testing and won't always be present).

I get a few errors when trying to authenticate;

Cannot change authentication method to LDAP
Details
ldap_bind(): Unable to bind to server: Invalid credentials [authentication.php:132 → CLdapAuthValidator->validate() → CLdap->checkPass() → ldap_bind() in include/classes/ldap/CLdap.php:112]
LDAP: cannot bind by given Bind DN.
Login name or password is incorrect!

I have checked and checked again and the username and password are correct.

What I'm not sure if is the test account, this is stuck at Admin and I can't change it to a valid LDAP account, is that right? Do i need to create an LDAP/AD account called admin?

[guzzijason]

I know in my environment, I ran into problems similar to this due to the LDAP server requiring TLS (LDAPS) connections, and its use of an internal company-hosted Certificate Authority.

Basically, the only way I could get it working was to set 'TLS_REQCERT allow' (or even 'never') on the zabbix server, in /etc/openldap/ldap.conf. I tried importing the CA certificate on the zabbix server, but for some reason that never worked for me, so I had to resort to changing the TLS_REQCERT option.

Not sure if this is the same issue as you or not, but something to keep in mind at least. It was a pain to troubleshoot, because the diagnostic messages reporting by the PHP ldap client tend to be terribly uninformative.

__Jason

[PDMM]

I had exactly the same problem,

I stopped accessing zabbix v3. 0. 8 giving user validation error.
It validated the user against ldap from command line, but not in zabbix.
To resolve the problem, change the name to 'ldap host' by ip (Administration =>; Authetication =>; LDAP host) and run again.

En Español:

Tuve exactamente el mismo problema,

Me dejo de funcionar el acceso a zabbix v3.0.8 dando error de validación de usuario.
Validaba el usuario contra ldap desde línea de comando, pero no en zabbix.

Para resolver el problema, cambie el nombre en "ldap host" por la ip (Administration => Authetication => LDAP host) y funciono nuevamente.

[bazron]

worked for me!

Thanks PPDM!

I had exactly the same problem,

I stopped accessing zabbix v3. 0. 8 giving user validation error.
It validated the user against ldap from command line, but not in zabbix.
To resolve the problem, change the name to 'ldap host' by ip (Administration =>; Authetication =>; LDAP host) and run again.

En Español:

Tuve exactamente el mismo problema,

Me dejo de funcionar el acceso a zabbix v3.0.8 dando error de validación de usuario.
Validaba el usuario contra ldap desde línea de comando, pero no en zabbix.

Para resolver el problema, cambie el nombre en "ldap host" por la ip (Administration => Authetication => LDAP host) y funciono nuevamente.

[dimir]

Do you guys know you can register an issue in https://support.zabbix.com ? Please somebody do it and post a link to issue here.