Zabbix 2.0.4 against OpenLDAP Don't load Users

[gpostiglioni]

Hi all, sorry about my english!!

i'm set zabbix 2.0.4 to authenticate against an OpenLDAP base, the integration seems to work with the configuration below:

Default authentication => LDAP
LDAP host =========> 192.168.100.5
Port ==============> 389
Base DN ==========> ou=gestao,dc=site2,dc=intranet
Search attribute ======> uid
Bind DN ===========> uid=zabbixadm,ou=gestao,dc=site2,dc=intranet
Bind Password ======> Senha do zabbixadm
Login =============> zabbixadm
User password ======> Senha do zabbixadm

...so when i click in the "test" button zabbix returns me that the connection is working, so i click in "save" and the authentication is changed to OpenLDAP, but if i try to login into zabbix with any LDAP user it simply doesn't work, its like the user doesn't exist, but if i create an user in zabbix with the same name of an user in LDAP, i can login with that user, so i want to know if this behaviour is normal or not, if not how can i fix it??

[ahowell]

Yes, LDAP is just for authentication. You still have to create users in zabbix.

[gpostiglioni]

Hum thanks,

so what about groups? there is any group support, so i dont need to always create an user.

[heaje]

I'm not aware of any LDAP group support although it would be great functionality to have. All that the current Zabbix LDAP authentcation implementation gives us is the ability to use LDAP for the password for the user.

[heaje]

One thing that could be done to work around the basic LDAP authentication is to create a custom script that periodically queries LDAP for the list of users that should have access to Zabbix. It could then use the Zabbix API to create/delete users as needed.