search

BGmot / zabbix

This repository is a fork of official Zabbix repository https://github.com/zabbix/zabbix.git. See README why it was forked.
GNU General Public License v2.0
31 stars 8 forks source link

don't work with idm or freeipa #29

Open es-x opened 2 years ago

es-x commented 2 years ago

Hey, i have a problem with auth when i'm using freeipa ldap auth.

Freeipa uses binddn for users like this:

cn=users,cn=accounts,dc=idm,dc=local

but when analyzing the code, I found the following: in the file CUser.php string number 2240

if (preg_match('/CN=(.+?),OU=/i', $adgroup, $matches)) {

if I change OU to CN then authorization starts working and users are created using groups.

best regards

BGmot commented 2 years ago

Hi, that would be a new feature request so we have a special field to compare what we receive from LDAP server with. Current solution works well with OpenLDAP and Microsoft Active Directory. I think for now you'll be better off just changing the code since you already know how to do it and I hope to completely deprecate this feature when 6.4 is coming out because 6.4 should already have this functionality "out of the box". Or we could change the code to if (preg_match('/^CN=(.+?),/i', $adgroup, $matches)) { that should work for all use cases, need to test it.

es-x commented 2 years ago

Hello it work too, thanks if (preg_match('/^CN=(.+?),/i', $adgroup, $matches)) {

aphroditae commented 2 years ago

hello I have a question. I am using zabbix server 5.0.24 version. I installed version 5.0.27 from https://github.com/BGmot/zabbix/tree/release/5.0-bg, but Google Authenticator does not work. What should I do?

BGmot commented 2 years ago

@aphroditae please create new issue and report what exactly happens. In what way it "does not work"?

aphroditae commented 2 years ago

thank you for answering.

After changing the language to English, I saved it by selecting Google Authenticator and it worked normally.

It would be nice if it could be modified so that it can be saved normally even in other languages.

I speak Korean.

From: Evgeny @.> Sent: Wednesday, August 31, 2022 9:23 PM To: BGmot/zabbix @.> Cc: aphroditae @.>; Mention @.> Subject: Re: [BGmot/zabbix] don't work with idm or freeipa (Issue #29)

@aphroditae https://github.com/aphroditae please create new issue and report what exactly happens. In what way it "does not work"?

— Reply to this email directly, view it on GitHub https://github.com/BGmot/zabbix/issues/29#issuecomment-1232866542 , or unsubscribe https://github.com/notifications/unsubscribe-auth/AWM7A3M777AHNERFZTQNBLDV35FDNANCNFSM56A4ZTBQ . You are receiving this because you were mentioned. https://github.com/notifications/beacon/AWM7A3KKZMNEIRRDPACENDTV35FDNA5CNFSM56A4ZTB2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOJF6AZ3Q.gif Message ID: @.***>