Uploaded image for project: 'ZABBIX FEATURE REQUESTS'
  2. ZBXNEXT-276 LDAP authentication with groups support
  3. ZBXNEXT-3835

LDAP authentication: Add/Edit new LDAP server (Screens 2,3)


    • Icon: Change Request (Sub-task) Change Request (Sub-task)
    • Resolution: Won't Do
    • Icon: Trivial Trivial
    • None
    • None
    • Frontend (F)
    • None
    • Sprint 2, Sprint 3, Sprint 4, Sprint 5, Sprint 6, Sprint 90 (Jul 2022), Sprint 91 (Aug 2022), Sprint 92 (Sep 2022), Sprint 93 (Oct 2022), Sprint 94 (Nov 2022), Sprint 95 (Dec 2022), Sprint 96 (Jan 2023)
    • 5

      Currently Zabbix frontend communicates with LDAP server with no encryption, but fully encrypted - LDAPS - is also reported as working. Some users complain that the third method - LDAP with StartTLS - does not work, although a small change in the frontend PHP code makes it work. In the screen above, the “Use TLS” field is added to support all 3 methods. On the other hand, the StartTLS method is less secure than LDAPS, as it starts unencrypted, then the client (Zabbix frontend) proposes to LDAP server to switch to TLS. It has to be decided - do we add support of StartTLS method.

      “Test” button checks “Bind” operation - is it successful.

      “Test” button checks “Bind” operation - is it successful.

            zabbix.dev Zabbix Development Team
            palivoda Rostislav Palivoda
            Team B
            1 Vote for this issue
            7 Start watching this issue