Uploaded image for project: 'ZABBIX BUGS AND ISSUES'
  1. ZABBIX BUGS AND ISSUES
  2. ZBX-21451

Web Scenarios - Incorrect Parsing of Passwords / Usernames.

XMLWordPrintable

    • Sprint 91 (Aug 2022)

      Overview

      We are utilizing zabbix web scenarios in order to monitor several internal web resources.  Those resources utilize NTLM authentication to allow access.  NTLM Usernames and passwords do not work as expected.

       

      The Problem

      The username is a domain username "domainname\username"

      The password contains numbers, letters (upper AND lower) and also symbols (@).

      I can access the web resource using the command line curl command and the proper URL / username & password.

      Example of command:
      export blah="domain\blahblah:Passwordwith@sign"
      curl --ntlm -u "${blah}" http://servername

      As per the request of a Zabbix Developer (Dimir), I enabled debugging and confirmed that the username and password being reported in the debug output are correct.

      Additionally, i attempted to escape the username "domainname
      username" and also the password "Password1234@"  This did not work.

       

      Expected outcome:

      The username and password entered in the username and password fields work as expected, without needing to be escaped.

            asestakovs Aleksejs Sestakovs
            bradturnbough Brad Turnbough
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved: