Still can log in when LDAP authentication being disabled

[wyang]

Configurations on test environment

• default authentication: internal
• user group admin_internal
  • Frontend access: internal
  • user1 belongs to this group
• user group admin_ldap
  • Frontend access: LDAP
  • user2 belongs to this group
• when LDAP authentication is configured and enabled, both users can login
• when LDAP authentication is disabled, both users still can login

Anything wrong in the configuration?

[wyang]

We have two test environments, Zabbix 4.0 and 5.0. Tested on both, users in group admin_ldap can log in when LDAP authentication is disabled.

[wyang]

The Frondend access of user group admin_ldap is explicitly defined as LDAP. The user2 was created without password.

[wyang]

Configurations on test environment

• default authentication: internal
• user group admin_ldap was created with Frontend access method LDAP
• user2 was created to belong to group admin_ldap without password
• when LDAP authentication is configured and enabled, user2 can login
• when LDAP authentication is disabled, user2 still can login

I was wondering if user2's password was saved in zabbix from the time the user login when LDAP was enabled and thus did another test

• user3 was created to belong to group admin_ldap without password when LDAP authentication was disabled
• when LDAP authentication is kept being disabled, user3 can log in with LDAP password

[cyber]

Local password is the same as in LDAP?...