don't work with idm or freeipa

[es-x]

Hey,
i have a problem with auth when i'm using freeipa ldap auth.

Freeipa uses binddn for users like this:

cn=users,cn=accounts,dc=idm,dc=local

but when analyzing the code, I found the following: in the file CUser.php string number 2240

if (preg_match('/CN=(.+?),OU=/i', $adgroup, $matches)) {

if I change OU to CN then authorization starts working and users are created using groups.

best regards

[BGmot]

Hi,
that would be a new feature request so we have a special field to compare what we receive from LDAP server with. Current solution works well with OpenLDAP and Microsoft Active Directory.
I think for now you'll be better off just changing the code since you already know how to do it and I hope to completely deprecate this feature when 6.4 is coming out because 6.4 should already have this functionality "out of the box".
Or we could change the code to
if (preg_match('/^CN=(.+?),/i', $adgroup, $matches)) {
that should work for all use cases, need to test it.

[es-x]

Hello
it work too, thanks
if (preg_match('/^CN=(.+?),/i', $adgroup, $matches)) {

[aphroditae]

hello
I have a question.
I am using zabbix server 5.0.24 version.
I installed version 5.0.27 from https://github.com/BGmot/zabbix/tree/release/5.0-bg, but Google Authenticator does not work.
What should I do?

[BGmot]

@aphroditae please create new issue and report what exactly happens. In what way it "does not work"?

[aphroditae]

thank you for answering. After changing the language to English, I saved it by selecting Google Authenticator and it worked normally. It would be nice if it could be modified so that it can be saved normally even in other languages. I speak Korean. From: Evgeny ***@***.***> Sent: Wednesday, August 31, 2022 9:23 PM To: BGmot/zabbix ***@***.***> Cc: aphroditae ***@***.***>; Mention ***@***.***> Subject: Re: [BGmot/zabbix] don't work with idm or freeipa (Issue #29) @aphroditae <https://github.com/aphroditae> please create new issue and report what exactly happens. In what way it "does not work"? — Reply to this email directly, view it on GitHub <#29 (comment)> , or unsubscribe <https://github.com/notifications/unsubscribe-auth/AWM7A3M777AHNERFZTQNBLDV35FDNANCNFSM56A4ZTBQ> . You are receiving this because you were mentioned. <https://github.com/notifications/beacon/AWM7A3KKZMNEIRRDPACENDTV35FDNA5CNFSM56A4ZTB2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOJF6AZ3Q.gif> Message ID: ***@***.***>