Uploaded image for project: 'ZABBIX BUGS AND ISSUES'
  1. ZABBIX BUGS AND ISSUES
  2. ZBX-24001

CyberArk Vault integration in Frontend is not working with cert auth

XMLWordPrintable

    • S24-W10/11, S24-W12/13, S24-W16/17
    • 2

      Steps to reproduce:

      1. Configure 6.4 Zabbix Server and Frontend to work with CyberArk

      Server:

      Vault=CyberArk
VaultURL=https://some.url.org
VaultDBPath=AppID=APP_ZABBIX_PROD&Safe=SOME&Object=SOMETHING
VaultTLSCertFile=...some.crt
VaultTLSKeyFile=...some.key.pem

      Frontend:

      $DB['VAULT']                    = 'CyberArk';
$DB['VAULT_URL']                = 'https://some.url.org';
$DB['VAULT_DB_PATH']            = 'AppID=APP_ZABBIX_PROD&Safe=SOME&Object=SOMETHING';
$DB['VAULT_CERT_FILE']          = '...some.crt';
$DB['VAULT_KEY_FILE']           = '...some.pem';

      Result:
      Server works.

      Frontend doesn't work: 

      {"ErrorCode":"APPAP330E","ErrorMsg":"Failed to verify application authentication data: Could not obtain client certificate details."}

      Problem:
      https://cyberark.my.site.com/s/article/AAM-AAP-AIM-CCP-Error-APPAP330E-Failed-to-verify-application-authentication-data-Could-not-obtain-client-certificate-details

      Expected:
      Same settings works in a same way for Server and Frontend.

        1. ZBX_24001.patch
          1 kB

            zabbix.dev Zabbix Development Team
            edgar.akhmetshin Edgar Akhmetshin
            Votes:
            4 Vote for this issue
            Watchers:
            13 Start watching this issue

              Created:
              Updated:
              Resolved: