{"id":2114,"date":"2019-08-18T20:15:36","date_gmt":"2019-08-18T19:15:36","guid":{"rendered":"https:\/\/hypervlab.co.uk\/?p=2114"},"modified":"2019-08-18T20:15:40","modified_gmt":"2019-08-18T19:15:40","slug":"configure-zabbix-ldap-authentication","status":"publish","type":"post","link":"https:\/\/hypervlab.co.uk\/?p=2114","title":{"rendered":"Configure Zabbix LDAP Authentication"},"content":{"rendered":"Reading Time: <\/span> 3<\/span> minutes<\/span><\/span>\n

In this blog post, I will cover the principles of setting up LDAP Authentication with the Zabbix Dashboard. From the Dashboard go to Administration > Authentication<\/p>\n\n\n\n

\"\"<\/figure><\/div>\n\n\n\n

Select the LDAP Settings Tab and let’s start the configuration <\/p>\n\n\n\n

\"\"<\/figure><\/div>\n\n\n\n

Now to start on the configuration<\/p>\n\n\n\n
Parameter<\/th>Description<\/th><\/tr><\/thead>
Enable LDAP authentication<\/em><\/td>Mark the checkbox to enable LDAP authentication.<\/td><\/tr>
LDAP host<\/em><\/td>Name of LDAP server. For example: ldap:\/\/ldap.zabbix.com
For secure LDAP server use ldaps<\/em> protocol.
ldaps:\/\/ldap.zabbix.com
With OpenLDAP 2.x.x and later, a full LDAP URI<\/abbr> of the form ldap:\/\/hostname:port or ldaps:\/\/hostname:port may be used.<\/td><\/tr>
Port<\/em><\/td>Port of LDAP server. Default is 389.
For secure LDAP connection port number is normally 636.
Not used when using full LDAP URIs.<\/td><\/tr>
Base DN<\/em><\/td>Base path to search accounts:
ou=Users,ou=system (for OpenLDAP),
DC=company,DC=com (for Microsoft Active Directory)<\/td><\/tr>
Search attribute<\/em><\/td>LDAP account attribute used for search:
uid (for OpenLDAP),
sAMAccountName (for Microsoft Active Directory)<\/td><\/tr>
Bind DN<\/em><\/td>LDAP account for binding and searching over the LDAP server, examples:
uid=ldap_search,ou=system (for OpenLDAP),
CN=ldap_search,OU=user_group,DC=company,DC=com (for Microsoft Active Directory)

Required, anonymous binding is not supported.<\/td><\/tr>
Case-sensitive login<\/em><\/td>Unmark the checkbox to disable case-sensitive login (enabled by default) for usernames.
E.g. disable case-sensitive login and log in with, for example, \u2018ADMIN\u2019 user even if the Zabbix user is \u2018Admin\u2019.
Note<\/em> that with case-sensitive login disabled the login will be denied if multiple users exist in Zabbix database with similar alias (e.g. Admin, admin).<\/td><\/tr>
Bind password<\/em><\/td>LDAP password of the account for binding and searching over the LDAP server.<\/td><\/tr>
Test authentication<\/em><\/td>Header of a section for testing<\/td><\/tr>
Login<\/em><\/td>Name of a test user (which is currently logged in the Zabbix frontend). This user name must exist in the LDAP server.
Zabbix will not activate LDAP authentication if it is unable to authenticate the test user.<\/td><\/tr>
User password<\/em><\/td>LDAP password of the test user.<\/td><\/tr><\/tbody><\/table>\n\n\n\n

Once you have completed the LDAP Configuration your screen should look something like the below graphic: <\/p>\n\n\n\n

\"\"<\/figure><\/div>\n\n\n\n

NOTE:<\/strong> Once you have configured the LDAP Authentication the default will change.<\/strong><\/p>\n\n\n\n

\"\"<\/figure><\/div>\n\n\n\n

Now we have configurated the LDAP Authentication, Next let’s create an LDAP Security Group, So only certain IT Support Teams can access the Zabbix Dashboard. <\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

From the Zabbix Dashboard, Administration > User Groups.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

From the Top-Right click ‘Create User Group’.
Ensure that the group name, matches the same as the Active Directory Security Group.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Next, we need to create an authentication account for Zabbix which will cross-check with LDAP, to complete this from the navigation menu, Go to Administration > Users<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

On the top right-click ‘New Users’.
NOTE:<\/strong> This Account has been pre-configured as a normal AD Service Account and has not been documented<\/strong>.<\/p>\n\n\n\n

Ensure that the LDAP Service account is part of the ‘Zabbix LDAP Authentication’ Group.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Click ‘Add’.<\/p>\n\n\n\n

Using an Incognito Window we can test the LDAP Login for the ‘netmonitor’ Account.
Open the Browser and naviagte to the IP Address of your Zabbix instance.<\/p>\n\n\n\n

http:\/\/192.168.101.18\/Zabbix<\/code><\/pre>\n\n\n\n
\"\"<\/figure><\/div>\n\n\n\n
Authentication Completed, We’ve Logged in as the netmonitor Account. <\/p>\n\n\n\n
\"\"<\/figure><\/div>\n","protected":false},"excerpt":{"rendered":"
Reading Time: <\/span>  3<\/span> minutes<\/span><\/span>In this blog post, I will cover the principles of setting up LDAP Authentication with the Zabbix Dashboard. From the Dashboard go to Administration > Authentication Select the LDAP Settings Tab and let’s start the configuration Now to start on the configuration Parameter Description Enable LDAP authentication Mark the checkbox to enable LDAP authentication. LDAP […]<\/p>\n","protected":false},"author":2,"featured_media":2115,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[39,248],"tags":[96,107,253,246],"class_list":["post-2114","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-networking","category-zabbix","tag-activedirectory","tag-authentication","tag-ldap","tag-zabbix"],"yoast_head":"\nConfigure Zabbix LDAP Authentication - HypervLAB<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/hypervlab.co.uk\/?p=2114\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Configure Zabbix LDAP Authentication - HypervLAB\" \/>\n<meta property=\"og:description\" content=\"Reading Time:  3 minutesIn this blog post, I will cover the principles of setting up LDAP Authentication with the Zabbix Dashboard. From the Dashboard go to Administration > Authentication Select the LDAP Settings Tab and let’s start the configuration Now to start on the configuration Parameter Description Enable LDAP authentication Mark the checkbox to enable LDAP authentication. LDAP […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/hypervlab.co.uk\/?p=2114\" \/>\n<meta property=\"og:site_name\" content=\"HypervLAB\" \/>\n<meta property=\"article:published_time\" content=\"2019-08-18T19:15:36+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2019-08-18T19:15:40+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/hypervlab.co.uk\/wp-content\/uploads\/2019\/08\/FeatureImage_ZabbixLDAP.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"600\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Simon Lee\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@https:\/\/twitter.com\/smoon_lee\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Simon Lee\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/hypervlab.co.uk\/?p=2114\",\"url\":\"https:\/\/hypervlab.co.uk\/?p=2114\",\"name\":\"Configure Zabbix LDAP Authentication - HypervLAB\",\"isPartOf\":{\"@id\":\"https:\/\/hypervlab.co.uk\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/hypervlab.co.uk\/?p=2114#primaryimage\"},\"image\":{\"@id\":\"https:\/\/hypervlab.co.uk\/?p=2114#primaryimage\"},\"thumbnailUrl\":\"https:\/\/hypervlab.co.uk\/wp-content\/uploads\/2019\/08\/FeatureImage_ZabbixLDAP.png\",\"datePublished\":\"2019-08-18T19:15:36+00:00\",\"dateModified\":\"2019-08-18T19:15:40+00:00\",\"author\":{\"@id\":\"https:\/\/hypervlab.co.uk\/#\/schema\/person\/7d184970612a9c6a5f1babb8b6b4d359\"},\"breadcrumb\":{\"@id\":\"https:\/\/hypervlab.co.uk\/?p=2114#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/hypervlab.co.uk\/?p=2114\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/hypervlab.co.uk\/?p=2114#primaryimage\",\"url\":\"https:\/\/hypervlab.co.uk\/wp-content\/uploads\/2019\/08\/FeatureImage_ZabbixLDAP.png\",\"contentUrl\":\"https:\/\/hypervlab.co.uk\/wp-content\/uploads\/2019\/08\/FeatureImage_ZabbixLDAP.png\",\"width\":1200,\"height\":600},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/hypervlab.co.uk\/?p=2114#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/hypervlab.co.uk\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Configure Zabbix LDAP Authentication\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/hypervlab.co.uk\/#website\",\"url\":\"https:\/\/hypervlab.co.uk\/\",\"name\":\"HypervLAB\",\"description\":\"Blogging about all thing Microsoft\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/hypervlab.co.uk\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/hypervlab.co.uk\/#\/schema\/person\/7d184970612a9c6a5f1babb8b6b4d359\",\"name\":\"Simon Lee\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/hypervlab.co.uk\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/9473a3cf9c75192508eccfd9d072efab80adf04a45083e561d0e3065f681c34c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/9473a3cf9c75192508eccfd9d072efab80adf04a45083e561d0e3065f681c34c?s=96&d=mm&r=g\",\"caption\":\"Simon Lee\"},\"description\":\"Hi, I'm Simon an IT Enthusiast, PowerShell Geek, Gamer, and Sound Engineer. I've been working with in the IT Industry for around 6 years and have worked across private and public sector companies. The original idea behind \\\"hypervlab\\\" was that I required an 'RnD' environment which would allow me to be able to replicate any kind of enterprise on-premise environment which I could use for learning and testing without learning in a production environment. So in 2019, I decided to branch out and use the domain for a public facing blog to be able to contribute to the IT Community about all things Microsoft.\",\"sameAs\":[\"https:\/\/hypervlab.co.uk\",\"https:\/\/www.linkedin.com\/in\/simon-john-lee\/\",\"https:\/\/x.com\/https:\/\/twitter.com\/smoon_lee\"],\"url\":\"https:\/\/hypervlab.co.uk\/?author=2\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Configure Zabbix LDAP Authentication - HypervLAB","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/hypervlab.co.uk\/?p=2114","og_locale":"en_GB","og_type":"article","og_title":"Configure Zabbix LDAP Authentication - HypervLAB","og_description":"Reading Time:  3 minutesIn this blog post, I will cover the principles of setting up LDAP Authentication with the Zabbix Dashboard. From the Dashboard go to Administration > Authentication Select the LDAP Settings Tab and let’s start the configuration Now to start on the configuration Parameter Description Enable LDAP authentication Mark the checkbox to enable LDAP authentication. LDAP […]","og_url":"https:\/\/hypervlab.co.uk\/?p=2114","og_site_name":"HypervLAB","article_published_time":"2019-08-18T19:15:36+00:00","article_modified_time":"2019-08-18T19:15:40+00:00","og_image":[{"width":1200,"height":600,"url":"https:\/\/hypervlab.co.uk\/wp-content\/uploads\/2019\/08\/FeatureImage_ZabbixLDAP.png","type":"image\/png"}],"author":"Simon Lee","twitter_card":"summary_large_image","twitter_creator":"@https:\/\/twitter.com\/smoon_lee","twitter_misc":{"Written by":"Simon Lee","Estimated reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/hypervlab.co.uk\/?p=2114","url":"https:\/\/hypervlab.co.uk\/?p=2114","name":"Configure Zabbix LDAP Authentication - HypervLAB","isPartOf":{"@id":"https:\/\/hypervlab.co.uk\/#website"},"primaryImageOfPage":{"@id":"https:\/\/hypervlab.co.uk\/?p=2114#primaryimage"},"image":{"@id":"https:\/\/hypervlab.co.uk\/?p=2114#primaryimage"},"thumbnailUrl":"https:\/\/hypervlab.co.uk\/wp-content\/uploads\/2019\/08\/FeatureImage_ZabbixLDAP.png","datePublished":"2019-08-18T19:15:36+00:00","dateModified":"2019-08-18T19:15:40+00:00","author":{"@id":"https:\/\/hypervlab.co.uk\/#\/schema\/person\/7d184970612a9c6a5f1babb8b6b4d359"},"breadcrumb":{"@id":"https:\/\/hypervlab.co.uk\/?p=2114#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/hypervlab.co.uk\/?p=2114"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/hypervlab.co.uk\/?p=2114#primaryimage","url":"https:\/\/hypervlab.co.uk\/wp-content\/uploads\/2019\/08\/FeatureImage_ZabbixLDAP.png","contentUrl":"https:\/\/hypervlab.co.uk\/wp-content\/uploads\/2019\/08\/FeatureImage_ZabbixLDAP.png","width":1200,"height":600},{"@type":"BreadcrumbList","@id":"https:\/\/hypervlab.co.uk\/?p=2114#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/hypervlab.co.uk\/"},{"@type":"ListItem","position":2,"name":"Configure Zabbix LDAP Authentication"}]},{"@type":"WebSite","@id":"https:\/\/hypervlab.co.uk\/#website","url":"https:\/\/hypervlab.co.uk\/","name":"HypervLAB","description":"Blogging about all thing Microsoft","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/hypervlab.co.uk\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Person","@id":"https:\/\/hypervlab.co.uk\/#\/schema\/person\/7d184970612a9c6a5f1babb8b6b4d359","name":"Simon Lee","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/hypervlab.co.uk\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/9473a3cf9c75192508eccfd9d072efab80adf04a45083e561d0e3065f681c34c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9473a3cf9c75192508eccfd9d072efab80adf04a45083e561d0e3065f681c34c?s=96&d=mm&r=g","caption":"Simon Lee"},"description":"Hi, I'm Simon an IT Enthusiast, PowerShell Geek, Gamer, and Sound Engineer. I've been working with in the IT Industry for around 6 years and have worked across private and public sector companies. The original idea behind \"hypervlab\" was that I required an 'RnD' environment which would allow me to be able to replicate any kind of enterprise on-premise environment which I could use for learning and testing without learning in a production environment. So in 2019, I decided to branch out and use the domain for a public facing blog to be able to contribute to the IT Community about all things Microsoft.","sameAs":["https:\/\/hypervlab.co.uk","https:\/\/www.linkedin.com\/in\/simon-john-lee\/","https:\/\/x.com\/https:\/\/twitter.com\/smoon_lee"],"url":"https:\/\/hypervlab.co.uk\/?author=2"}]}},"_links":{"self":[{"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/2114","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2114"}],"version-history":[{"count":0,"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/2114\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=\/wp\/v2\/media\/2115"}],"wp:attachment":[{"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2114"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2114"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2114"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}