Skip to content

LDAP Authentication Grafana

elurex edited this page Mar 25, 2019 · 1 revision

ssh into grafana instance and edit /etc/grafana/grafana.ini , go to line 295

#################################### Auth LDAP ##########################
[auth.ldap]
enabled = true
config_file = /etc/grafana/ldap.toml
;allow_sign_up = true

edit /etc/grafana/ldap.toml

# [log]
# filters = ldap:debug
# verbose_logging = true

[[servers]]
# Ldap server host ,specify multiple hosts space separated
host = "<ldap server ip>"
port = 389
use_ssl = false
start_tls = false
ssl_skip_verify = true
bind_dn = "cn=admin,dc=example,dc=com"
bind_password = "<ldap password>"
search_filter = "(cn=%s)"
search_base_dns = ["dc=example,dc=com"]
group_search_filter = "(&(objectClass=groupOfNames)(!(cn=Domain*))(member=%s))"
group_search_base_dns = ["ou=Groups,dc=example,dc=com"]
group_search_filter_user_attribute = "cn"

[servers.attributes]
name = "givenName"
surname = "sn"
username = "cn"
member_of = "memberOf"
email =  "mail"

[[servers.group_mappings]]
group_dn = "sudoers"
org_role = "Admin"
grafana_admin = true
org_id = 1

Clone this wiki locally