-
Notifications
You must be signed in to change notification settings - Fork 5
LDAP Authentication Grafana
elurex edited this page Mar 25, 2019
·
1 revision
ssh into grafana instance and edit /etc/grafana/grafana.ini , go to line 295
#################################### Auth LDAP ##########################
[auth.ldap]
enabled = true
config_file = /etc/grafana/ldap.toml
;allow_sign_up = trueedit /etc/grafana/ldap.toml
# [log]
# filters = ldap:debug
# verbose_logging = true
[[servers]]
# Ldap server host ,specify multiple hosts space separated
host = "<ldap server ip>"
port = 389
use_ssl = false
start_tls = false
ssl_skip_verify = true
bind_dn = "cn=admin,dc=example,dc=com"
bind_password = "<ldap password>"
search_filter = "(cn=%s)"
search_base_dns = ["dc=example,dc=com"]
group_search_filter = "(&(objectClass=groupOfNames)(!(cn=Domain*))(member=%s))"
group_search_base_dns = ["ou=Groups,dc=example,dc=com"]
group_search_filter_user_attribute = "cn"
[servers.attributes]
name = "givenName"
surname = "sn"
username = "cn"
member_of = "memberOf"
email = "mail"
[[servers.group_mappings]]
group_dn = "sudoers"
org_role = "Admin"
grafana_admin = true
org_id = 1