master
root@zabbix.znil.net 2020-04-14 17:39:35 +02:00
parent 7da98727d6
commit 41b5d241eb
1 changed files with 10 additions and 5 deletions

View File

@ -20,9 +20,11 @@ This is a pure bash-script for syncing a Actice-Directory Group via LDAP with a
- Create a special User for the LDAP Access. User need no special rights but should be Domain-User - Create a special User for the LDAP Access. User need no special rights but should be Domain-User
- Avoid special chars in username and password like `äöü!?>$%` and spaces - Avoid special chars in username and password like `äöü!?>$%` and spaces
- After creating get the ***distinguished name*** of this user. You can query the name on a doamin controller with - After creating get the ***distinguished name*** of this user. You can query the name on a doamin controller with
`dsquery user -samid <username>`
`dsquery user -samid <username>`
Output should something like Output should something like
`CN=ldapSearch,OU=MyUsers,DC=exampledomain,DC=local`
`CN=ldapSearch,OU=MyUsers,DC=exampledomain,DC=local`
where ***ldapSearch*** is the example-user where ***ldapSearch*** is the example-user
Create one or more Active Directory Groups and add Members. Empty Groups are allowed (then all members in Zabbix will be removed from Group and disabled). Create one or more Active Directory Groups and add Members. Empty Groups are allowed (then all members in Zabbix will be removed from Group and disabled).
@ -36,11 +38,14 @@ In the examples i am using the groupname `Zabbix-Super-Admin`
### 2. Install Prerequisites on Linux ### 2. Install Prerequisites on Linux
Yes, i am using pure bash to avoid any prerequisites but we need a program for accessing LDAP and some other tools. All of them should be available in the standard repositories: Yes, i am using pure bash to avoid any prerequisites but we need a program for accessing LDAP and some other tools. All of them should be available in the standard repositories:
**Debian/Ubuntu** **Debian/Ubuntu**
`apt install ldap-utils`
`apt install ldap-utils`
**Red Hat/CentOs/SuSe** **Red Hat/CentOs/SuSe**
`yum install openldap-clients`
`yum install openldap-clients`
The other needed programs are The other needed programs are
`curl sed dirname readlink`
`curl sed dirname readlink`
which should be already installed which should be already installed
### 3. Create Zabbix-User for API Access ### 3. Create Zabbix-User for API Access