[ZBX-16839] Cannot bind to LDAP server Created: 2019 Oct 30 Updated: 2020 Mar 18 Resolved: 2020 Mar 18 |
|
| Status: | Closed |
| Project: | ZABBIX BUGS AND ISSUES |
| Component/s: | None |
| Affects Version/s: | None |
| Fix Version/s: | None |
| Type: | Incident report | Priority: | Trivial |
| Reporter: | Omid | Assignee: | Arturs Lontons |
| Resolution: | Incomplete | Votes: | 0 |
| Labels: | None | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Attachments: |
|
| Description |
|
Dears, ZABBIX authentication for LDAP is came cross issue:"Cannot bind to LDAP server." however "Update" button in SNAP-SHOT is working but Test connection button isn't working and mentioned error has been token place. when I check LDAP configuration it seems that all things are ok. What is problem please?
|
| Comments |
| Comment by Omid [ 2019 Oct 30 ] |
|
ZABBIX version is 4.0.4 |
| Comment by Omid [ 2019 Oct 30 ] |
|
Also it has been worked for some users " some of super Admin users" |
| Comment by Tiago Silva Leite [ 2019 Oct 30 ] |
|
Hi, Do you see connection with:
Hugs
|
| Comment by Omid [ 2019 Oct 31 ] |
|
Hi, what do you mean connection with host, IP,Port destination? If you mean ping or telnet of destination, yes I have them, could you please clarify? |
| Comment by Omid [ 2019 Oct 31 ] |
|
After changing data in LDAP authentication panel, I saw that config table in database wasn't changing also authentication panel stayed in previous status without any notification or something like that.
could you please support? this is an urgent case! |
| Comment by Arturs Lontons [ 2019 Nov 01 ] |
|
Let's first summarize, so there's no miscommunication: The initial issue that you had was - you were encountering "Cannot bind to LDAP server." when pressing the "Test connection" button, is that correct? Next up you're saying that it is working for some users - what exactly is "it"? Are you able to test the connection without any issues with some specific zabbix user accounts? First, try using a tool like ldapsearch or similar one to test the connection to LDAP with the settings that you are specifying in Zabbix. Regards, |
| Comment by Omid [ 2019 Nov 02 ] |
|
Hi, please find below comments:
The initial issue that you had was - you were encountering "Cannot bind to LDAP server." when pressing the "Test connection" button, is that correct? Yes, It is correct, when I pressing "Test connection" button, issue is encountered. You're saying that it is working for some users - what exactly is "it"? I was on the wrong way, ZABBIX isn't working for some users, this was misleading due to browser cache behavior. If users was login, they could be login till they didn't log out and it has nothing to do with LDAP configuration. Are you able to test the connection without any issues with some specific zabbix user accounts? None of Users couldn't have logged in when connection is "LDAP one", plus mentioned notification is shown "Cannot bind to LDAP server." First, try using a tool like ldapsearch or similar one to test the connection to LDAP with the settings that you are specifying in Zabbix.
As I checked, server has completely connection with LDAP server, without any issue. I check with Attached command.
Furthermore when I checked the access log in apache server, I came across with below text: 192.168.245.131 - - [31/Oct/2019:14:50:08 +0330] "GET /zabbix.php?action=authentication.edit&ddreset=1 HTTP/1.1" 200 16377 "http://"URL"/users.php?ddreset=1" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" could you please support? |
| Comment by Omid [ 2019 Nov 02 ] |
|
issue isn't resolved yet, please find my comments. |
| Comment by Arturs Lontons [ 2019 Nov 05 ] |
|
The reason I asked specifically for testing via ldapsearch is - in addition to checking if ports are open, which you did in the screenshots, we should also check if we can actually connect to the LDAP with the specific LDAP credentials on the specific base DN. This is where you should use ldapsearch or as similar ldap connectivity testing tool. |
| Comment by Arturs Lontons [ 2020 Mar 18 ] |
|
Closing due to lack of activity. |