authentication failed

[xs-]

Hi,

Im currently testing 1.6 to use ldap as default authentication method.
There are some users which arent available in ldap, so i created a seperate group with the 'gui access internal' option. Allas, the user cannot login.
But after some testing, it seems that regardless of the default system auth method (either ldap or internal), the users with 'gui access internal' set via the group cannot login.

Anyone else experiencing this?

[Aly]

Hmm in testings with ldap auth, internal login group users may login with no problem. FYI, empty passwords are not allowed, may be that is the case?!

[xs-]

Nop, even change the password multiple times to rule out weird character stuff.
Users set to non-'system default' authentication cannot log in.

[Aly]

Could you please tell us the steps you are doing to set ZABBIX auth and users group auth, for better testing.

[xs-]

sorry, i should have done this in my first post

These are the steps i took in the beginning. I already have users configured. Some users are available in ldap, some users are not and should be authenticated locally.
UserX is available in ldap.
UserY is not available in ldap
Both users have a password set internally.

- admin -> auth -> configure and enable ldap support
- Test UserX login (ldap auth, system default), it works
- Test UserY login (ldap auth, system default), does not work (correctly!)
- Create new usergroup
- Set usergroup gui access to internal
- Add UserY to new usergroup. In the userlist UserY shows 'GUI access: internal'
- Test UserY login (internal auth?) does not work.

After this, for debugging purposes, i set the system authentication back to internal
- admin -> auth -> disable ldap support. (internal auth is default again)
- Test UserX login (via internal pass), it works
- Test UserY login (via internal pass), does not work
- Remove UserY from new usergroup. In userlist UserY shows 'GUI access: System default'
- Test UserY login (via internal pass), it works.

I am using firefox for configuration and IE for login tests, so there is no chance of session conflicts / re-used sessions.

Tom

[Aly]

Found the bug If ZABBIX auth is set different from internal it by default on user update sets user password to "zabbix".

Here is a patch.

[xs-]

Super, patch works.

Thanks!