[ZBX-26264] LDAP Issue (Test OK, Loginpage problem) Created: 2025 Apr 02  Updated: 2025 Aug 14  Resolved: 2025 Aug 14

Status: Closed
Project: ZABBIX BUGS AND ISSUES
Component/s: Frontend (F)
Affects Version/s: 7.0.10
Fix Version/s: None

Type: Problem report Priority: Trivial
Reporter: Priechodsky Dušan Assignee: Zabbix Support Team
Resolution: Cannot Reproduce Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Attachments: PNG File image-2025-04-02-13-34-22-197.png     PNG File image-2025-04-02-13-34-32-761.png     PNG File image-2025-04-02-13-35-40-741.png     PNG File image-2025-04-02-13-36-15-913.png     PNG File image-2025-04-03-13-29-52-237.png    

 Description   

We have had configured LDAP authentication to active directory for a long time and it worked well in the past.

Since we use SAML, I'm not sure when the problem occurred, but currently it behaves in such a way that the test passes without error, but when I use the same login details on the login page, it says "Incorrect user name or password or account is temporarily blocked."

What could be the problem? When I looked at external forums, quite a few people have already solved this problem in older versions and I've tried almost everything. Set up a completely different domain and server, account bind form, server host or with ldap:// , change to secure ldap, etc... Always the same, the test passes but I can't log in.



 Comments   
Comment by Edgar Akhmetshin [ 2025 Apr 03 ]

Hello Priechodsky

What values you have configured for the groups assigned to the user on the screenshots for 'Frontend access' and 'LDAP Server'?

Regards,
Edgar

Comment by Priechodsky Dušan [ 2025 Apr 03 ]

I have two LDAP servers set up, the second one does not have "Configure JIT provisioning" and the group setting enabled at all and it behaves the same. TEST OK, Classic LOGIN fail. It is another active directory domain with synces accounts and passwordss

Comment by Tomasz Grzechulski [ 2025 Jun 02 ]

Hello,
Just to confirm - both "IT operations" and "zabbix administrators" groups does not have preset value in "LDAP server"?

Generated at Thu May 21 20:06:36 EEST 2026 using Jira 10.3.18#10030018-sha1:5642e4ad348b6c2a83ebdba689d04763a2393cab.