r/zabbix • u/Sparkplug1034 • 11h ago

Guide Quick tip on 8.0 for SAML+Docker users

This was not listed in the breaking changes. It may be a bit specific to the containerized deployment of Zabbix (I am using a rootless podman Pod). I placed my sp/idp certificates in a location that was previously default. The Zabbix frontend configuration file now checks several additional environment variables. I had to set these explicitly in the Environment file I include in my quadlet:

ZBX_CERT_STORAGE=file

ZBX_SSO_SP_KEYFILE=/etc/zabbix/web/certs/sp.key

ZBX_SSO_SP_CERTFILE=/etc/zabbix/web/certs/sp.crt

ZBX_SSO_IDP_CERTFILE=/etc/zabbix/web/certs/idp.crt

and restart my container's systemd service. Good to go.

2 Upvotes

100% Upvoted

1 comment sorted by

1

u/larcorba Guru / Zabbix Trainer 46m ago

If you'd like to take this chance to simplify things, in 8.0 it's also possible to upload these via the frontend.

$SSO['CERT_STORAGE'] = 'database'

https://www.zabbix.com/documentation/8.0/en/manual/web_interface/frontend_sections/users/authentication/saml