zabbix icon indicating copy to clipboard operation
zabbix copied to clipboard

don't work with idm or freeipa

Open es-x opened this issue 1 year ago • 5 comments

Hey, i have a problem with auth when i'm using freeipa ldap auth.

Freeipa uses binddn for users like this:

cn=users,cn=accounts,dc=idm,dc=local

but when analyzing the code, I found the following: in the file CUser.php string number 2240

if (preg_match('/CN=(.+?),OU=/i', $adgroup, $matches)) {

if I change OU to CN then authorization starts working and users are created using groups.

best regards

es-x avatar Aug 09 '22 13:08 es-x

Hi, that would be a new feature request so we have a special field to compare what we receive from LDAP server with. Current solution works well with OpenLDAP and Microsoft Active Directory. I think for now you'll be better off just changing the code since you already know how to do it and I hope to completely deprecate this feature when 6.4 is coming out because 6.4 should already have this functionality "out of the box". Or we could change the code to if (preg_match('/^CN=(.+?),/i', $adgroup, $matches)) { that should work for all use cases, need to test it.

BGmot avatar Aug 09 '22 15:08 BGmot

Hello it work too, thanks if (preg_match('/^CN=(.+?),/i', $adgroup, $matches)) {

es-x avatar Aug 10 '22 08:08 es-x

hello I have a question. I am using zabbix server 5.0.24 version. I installed version 5.0.27 from https://github.com/BGmot/zabbix/tree/release/5.0-bg, but Google Authenticator does not work. What should I do?

aphroditae avatar Aug 31 '22 03:08 aphroditae

@aphroditae please create new issue and report what exactly happens. In what way it "does not work"?

BGmot avatar Aug 31 '22 12:08 BGmot

thank you for answering.

After changing the language to English, I saved it by selecting Google Authenticator and it worked normally.

It would be nice if it could be modified so that it can be saved normally even in other languages.

I speak Korean.

From: Evgeny @.> Sent: Wednesday, August 31, 2022 9:23 PM To: BGmot/zabbix @.> Cc: aphroditae @.>; Mention @.> Subject: Re: [BGmot/zabbix] don't work with idm or freeipa (Issue #29)

@aphroditae https://github.com/aphroditae please create new issue and report what exactly happens. In what way it "does not work"?

— Reply to this email directly, view it on GitHub https://github.com/BGmot/zabbix/issues/29#issuecomment-1232866542 , or unsubscribe https://github.com/notifications/unsubscribe-auth/AWM7A3M777AHNERFZTQNBLDV35FDNANCNFSM56A4ZTBQ . You are receiving this because you were mentioned. https://github.com/notifications/beacon/AWM7A3KKZMNEIRRDPACENDTV35FDNA5CNFSM56A4ZTB2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOJF6AZ3Q.gif Message ID: @.***>

aphroditae avatar Sep 01 '22 01:09 aphroditae