1e5fc76601
* LDAP: improve POSIX support * Correctly abtain DN attributes result * Allow more flexibility with comparison mapping between POSIX group & user * Add devenv for POSIX LDAP server * Correct the docs Fixes #18140
1.4 KiB
Notes on OpenLdap Docker Block
Any ldif files added to the prepopulate subdirectory will be automatically imported into the OpenLdap database.
Note that users that are added here need to specify a memberOf attribute manually as well as the member attribute for the group. The memberOf module usually does this automatically (if you add a group in Apache Directory Studio for example) but this does not work in the entrypoint script as it uses the slapadd command to add entries before the server has started and before the memberOf module is loaded.
After adding ldif files to prepopulate:
- Remove your current docker image:
docker rm docker_openldap_1 - Build:
docker-compose build docker-compose up
Enabling LDAP in Grafana
If you want to use users/groups with memberOf support Copy the ldap_dev.toml file in this folder into your conf folder (it is gitignored already). To enable it in the .ini file to get Grafana to use this block:
[auth.ldap]
enabled = true
config_file = conf/ldap_dev.toml
; allow_sign_up = true
Otherwise perform same actions for ldap_dev_posix.toml config.
Groups & Users
admins ldap-admin ldap-torkel backend ldap-carl ldap-torkel ldap-leo frontend ldap-torkel ldap-tobias ldap-daniel editors ldap-editors no groups ldap-viewer
Groups & Users (POSIX)
admins ldap-posix-admin no groups ldap-posix