LDAP questions

[louis-m]

Hi,
we're thinking of changing to LDAP for default authentication and have a few questions:

1. What happens to the current local users within Zabbix? Can you still use them?
2. Can you still create local users with LDAP in use?
3. How does an LDAP user get their Zabbix permissions mapped?

[long.chen]

1. You can't use local users.
2. You can't create local users, after switching to LDAP authentication, you should create a new user, but the user alias has to match the account (without domain) in Active Directory.
3. You manage the user permission in Zabbix after you create a user, LDAP is used for authentication only.

[louis-m]

Hi long.chen,
guess the answer I'm after is what if the LDAP lookup fails eg no LDAP server available after LDAP is enabled.
How would you log into Zabbix. Does it default to local user if no LDAP available?
For instance, in our Cisco routers/switches etc we use tacacs. If tacacs fails eg the connection is cut, the router defaults to the local database with which we have 2 local users purely used for this purpose. If tacacs is up, the local users can't be used.
I'm just weary of turning it on and being locked out.