Ad Widget

Collapse

Zabbix 3.0.2 Active Directory users sync

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • bozab1mix
    Junior Member
    • May 2016
    • 10

    #1

    Zabbix 3.0.2 Active Directory users sync

    Hello,

    I just installed Zabbix server and was able to configure the activate the LDAP connection on web portal to connect to AD of my Windows Server.

    Now, what I facing the error is that how do I sync my users and groups from Active Directory.

    LDAP is setup but none of users and groups are listed on the users our usergroups

    I tried this tools : https://github.com/dnaeon/zabbix-ldap-sync

    the command to sync do not give any errors when I execute but none of users assign to the group are imported

    Below my zabbix-ldap-sync.conf file

    [ldap]
    type = activedirectory
    uri = ldap://1.1.1.1:389/
    base = DC=MYSERVERDC=LOCAL,DC=COM
    binduser = MYSERVER\zabbix.ldap
    bindpass = ***********
    groups = Zabbix-Users (Zabbix Users is group in the Win Server with user that can access to the web portal)

    [zabbix]
    server = http://1.1.1.1/zabbix/
    username = admin.zabbix
    password = **********


    I am new to zabbix before I was using Nagios. (Actually I am testing Zabbix)

    Any help or guide.
  • SCSI
    Junior Member
    • Dec 2016
    • 3

    #2
    Did you ever get this to work? For me, I keep getting the following message.

    "Cannot connect to LDAP server: {'info': 'Error in the pull function.', 'desc': "Can't contact LDAP server"}"

    I have Zabbix AD authentication working. I just want to be able to sync my AD users and groups into Zabbix. Any help is appreciated.

    Comment

    • A_Tjuh
      Junior Member
      • Aug 2018
      • 1

      #3
      I'm having the same issues at the moment.

      Steps i'm taking:
      source venv/bin/activate
      ./zabbix-ldap-sync -f zabbix-ldap.conf
      Error: Cannot connect to LDAP server: {'desc': "Can't contact LDAP server", 'errno': 104, 'info': 'Error in the push function.'}

      When I change the URI to 389 i'm getting the error:
      Cannot connect to LDAP server: {'desc': "Can't contact LDAP server", 'errno': 104, 'info': 'Error in the pull function.'}

      LDAP Authentication is working in Zabbix

      Does anyone have an idea how to fix this?

      Current zabbix-ldap.conf
      Code:
      [ldap]
      type = activedirectory
      uri = ldaps://192.168.0.4:636/ #tried with 389 as well
      base = dc=ulc,dc=local
      binduser = ULC\$_ldap
      bindpass = *******
      groups = GG_Zabbix_Admin
      
      [ad]
      filtergroup = (&(objectClass=group)(name=%s))
      filteruser = (objectClass=user)(objectCategory=Person)
      filterdisabled = (!(userAccountControl:1.2.840.113556.1.4.803:=2))
      filtermemberof = (memberOf:1.2.840.113556.1.4.1941:=%s)
      groupattribute = member
      userattribute = sAMAccountName
      
      [openldap]
      type = posix
      filtergroup = (&(objectClass=posixGroup)(cn=%s))
      filteruser = (&(objectClass=posixAccount)(uid=%s))
      groupattribute = memberUid
      userattribute = uid
      
      [zabbix]
      server = http://192.168.0.73/zabbix/
      username = (LDAP Username)
      password = ********
      auth = webform
      
      [user]
      type = 3
      
      [media]
      description = Email
      severity = Disaster,High,Average,Warning

      Comment

      Working...