LDAP Authentication error

[Yello]

Hi,
We've deployed a second zabbix server and have chosen to authenticate against an ldap server. The configuration is pretty standard but, as you might imagine, it isn't working. The error I'm getting suggests it is not the config itself which is the issue:

"Error: LDAP Login was not successful Probably php-ldap is missing"

...but rather that zabbix is having trouble finding required resources. We're running php53 and have php53-ldap installed. And from looking at phpinfo ldap is loaded too. If someone can comment on how to handle this I'll appreciate it.


Regards,
David

[pwlodarczak]

LDAP Authentication error

I am getting the same error:

ERROR: LDAP Login was not successful
Probably php-ldap module is missing

But php-ldap is installed.

yum list |grep php-ldap
php-ldap.x86_64 5.3.3-14.el6_3 @rhel-6-server-rpms

I'm running RHEL 6.2.
Any ideas are greatly appreciated.
Regards
Peter

[Yello]

Hi,
I believe that error is bogus. Can you show your ldap configuration?


Regards,
David

[pwlodarczak]

Hi David,
Here is my configuration:

Default authentication : LDAP
LDAP Host 10.197.232.25
Port 389
Base DN: DC=vm-ch,DC=astra,DC=lokal
Search attribute sAMAccountName
Bind DN* sAMAccountName=steria-pwl,OU=Users
Bind Password* ***********
LDAP Authentication Enabled not checked
Test Authentication [must be valid LDAP User]
Login steria-hha
User Password ***********

Thank you
Peter

[Yello]

Hi,
From what I can see your config looks ok. If I recall (I am struggling to remember this clearly for some reason), when I got this error it turned out that the problem was with the configuration of the bind account on the ldap server. Some end user accounts were not set up correctly either.

I recommend that you look into the configuration on the ldap server and checks the ldap server logs for inbound requests from the zabbix server. Have you tested this from the command-line?


Regards,
David

[pwlodarczak]

LDAP Authentication error

I upgraded to zabbix 2.0.1, which didn't work as documented, worst documentation ever. May be I can save someone the pain I went through, here is what I had to do:

tar -zxvf zabbix-2.0.1.tar.gz
cd zabbix-2.0.1
./configure --enable-server --enable-agent --with-mysql --enable-ipv6 --with-net-snmp --with-libcurl --with-openipmi --with-ldap

tar xvjf php-5.4.4.tar.bz; 
cd php-5.4.4/
./configure --with-apxs2=/usr/local/apache2/bin/apxs --with-mysql --enable-bcmath --enable-mbstring --enable-sockets --with-png-dir --with-jpeg-dir --with-freetype-dir --with-gettext --with-gd
make
make install

tar -xzvf pcre-8.30.tar.gz
cd /usr/local/pcre-8.30
./configure
make
make install

tar -xzvf httpd-2.4.2.tar.gz
cd /home/apache/httpd-2.4.2
./configure --enable-so --with-included-apr --with-pcre=/usr/local
make
make install

Also the database upgrade script didn't work, I had to drop the database and create a new one.
But now I still get the same:

ERROR: LDAP login was not successful
Probably php-ldap module is missing.

error.

[pwlodarczak]

LDAP Authentication error

I got it to work. I had to install the php-ldap module:

yum-config-manager --enable rhel-6-server-supplementary
yum install php-ldap

then edit the php.ini and load the module:

vi /usr/local/lib/php.ini
extension=/usr/lib64/php-zts/modules/ldap.so

then restart apache:

apachectl restart

the sAMAccountName has to have the form

domain\username:

DOM\ldap_bind_user

my be this eases someones pain.
Cheers
Peter