master
root@zabbix.znil.net 2020-04-14 17:39:35 +02:00
parent 7da98727d6
commit 41b5d241eb
1 changed files with 10 additions and 5 deletions

View File

@ -20,8 +20,10 @@ This is a pure bash-script for syncing a Actice-Directory Group via LDAP with a
- Create a special User for the LDAP Access. User need no special rights but should be Domain-User
- Avoid special chars in username and password like `äöü!?>$%` and spaces
- After creating get the ***distinguished name*** of this user. You can query the name on a doamin controller with
`dsquery user -samid <username>`
Output should something like
`CN=ldapSearch,OU=MyUsers,DC=exampledomain,DC=local`
where ***ldapSearch*** is the example-user
@ -36,10 +38,13 @@ In the examples i am using the groupname `Zabbix-Super-Admin`
### 2. Install Prerequisites on Linux
Yes, i am using pure bash to avoid any prerequisites but we need a program for accessing LDAP and some other tools. All of them should be available in the standard repositories:
**Debian/Ubuntu**
`apt install ldap-utils`
**Red Hat/CentOs/SuSe**
`yum install openldap-clients`
The other needed programs are
`curl sed dirname readlink`
which should be already installed