LDAP auth for grafana

Grafana
1

Please someone help even with several attempts to make LDAP authentication to work for my grafana , it is not working .

all required details are as below.

Grafana version : Grafana v4.6.3 (commit: 7a06a47)

LDAP Auth Fails

Error log message

t=2017-12-24T13:36:06+0000 lvl=eror msg="Invalid username or password" logger=context userId=0 orgId=0 uname= error="Invalid Username or Password"
t=2017-12-24T13:36:06+0000 lvl=info msg="Request Completed" logger=context userId=0 orgId=0 uname= method=POST path=/login status=401 remote_addr=10.112.116.14 time_ms=3070 size=42 referer=http://grafana-server:3000/login

ldap.toml configuration

verbose_logging = true
host = "ad-server.subdomain.domain.com"
port = 636
use_ssl = true
start_tls = false
ssl_skip_verify = true
bind_dn = "cn=userproxy,ou=ServiceAccount,dc=subdomain,dc=domain,dc=com"
bind_password = "password"
search_filter = "(cn=%s)"
search_base_dns = ["ou=admins,dc=subdomain,dc=domain,dc=com"]

[servers.attributes]
name = "givenName"
username = "cn"
surname = "sn"
member_of = "memberOf"
email =  "userPrincipalName"

 [[servers.group_mappings]]
# If you want to match all (or no ldap groups) then you can use wildcard
group_dn = "*"
org_role = "Viewer"

grafana.ini configuration for LDAP

#################################### Auth LDAP ##########################
[auth.ldap]
enabled = true
config_file = /etc/grafana/ldap.toml
allow_sign_up = true
2

Did you get this working? If not, try turning on debug log level in the Grafana ini file to get more details.

4

@openttokix did you get it working?

5

No, I moved it to it’s own post since its 5.x anot not 4.x - and I realized I had necroed a post.

6
7

Hi All,

I have issue where I can’t setup bind password with plaintext.
Do you have idea how to setup encrypted password for bind LDAP?

Thank you