Ldap logon failing

[Tom Decaluwe]

Hi,

I configured Ldap logon on my zabbix system about 2 weeks ago and this was working great untill a few days go. Since then 2 of my 5 zabbix users are nolonger able to logon. They keep getting "ERROR: Login name or password is incorrect".
- I have double checked, their account still matches an ActiveDirector account
- I have reset the ActiveDirector password, not helping.

- I have restarted the httpd and rebooted the whole ubuntu server just to ensure it was not a the system layer.

Nothing i have done untill now seems to solve this issue. Any idea's on how i can troubleshoot this and see why the user is being rejected? Is the pw not correct eventhough it is, is the account not being found eventhough it has not changed?

Any help is welcome.

Tom

[Aly]

Make shore:
1. the users are configured to login through ldap (not internal)
2. Users are not disabled
3. Try to connect to ldap from some other tool and check user name and password from there.

[Tom Decaluwe]

Jep, found the issue. The users that where having the issue logging on through LDAP where in two groups and one group was set to system default and the other was set to internal. Clearly this is a conflict and caused the failure.

I changed all groups to use system default for gui access and off we are.

I did go as far as testing ldap through a 3de tool, this might come in handy for someone else having the same issue one day:

ldapsearch -x -LLL -E pr=200/noprompt -h [LDAP Host value] -D [Bind DN*] -w [Bind Password*] -b [Base DN] -s sub "(cn=*)" cn | grep -i [Login]

Thanks a bundle for your help.

Tom