Zabbix Web interface with LLDAP
This example is for the Zabbix Web interface version 6.0, which is the supported LTS version as of August 2023. Later versions have additional options.
Note that an LDAP user must exist in Zabbix Web as well, however its Zabbix password will not be used. When creating the user in Zabbix, the user should also be added to your desired Zabbix roles/groups.
Configure LDAP Settings
- Log in to the web interface as an admin
- Navigate to
Administration > Authentication > LDAP Settings
Here's a picture, see below for details:
Enable LDAP authentication
URI of your LLDAP host. Example:
ldaps://ldap.example.com:6360 for TLS.
Not used when using a full LDAP URI as above, but feel free to put
6360 for TLS.
Your LLDAPLDAPBASE. Example:
Alternately, it is recommended that you create a separate user account (e.g,
bind_user) instead of
admin for sharing Bind credentials with other services. The
bind_user should be a member of the
lldap_strict_readonly group to limit access to your LDAP configuration in LLDAP.
Password for the above bind DN user.
The test authentication
User password must be used to check the connection and whether an LDAP user can be successfully authenticated. Zabbix will not activate LDAP authentication if it is unable to authenticate the test user.
Enable LDAP in Zabbix Web
- Navigate to
Administration > Authentication > Authentication(the first tab)
- Set “Default authentication” to “LDAP”
- Click “Update”
Filed in: #solutions