I have a Grafana instance which uses an OpenLDAP DS as auth backend. I have no control over this backend. I now wanted to make use of groups to designate Admins & Editors.
It seems though that in stead of using static groups, this backend uses a feature called dynamic groups. Querying an existing group will return an entry containing a memberURL attribute containing an LDAP filter.
objectClass: groupOfURLs objectClass: top cn: GROUP_NAME memberURL: ldap:///ou=people,o=example??sub?(groupattrname=GROUP_NAME) ou: Groups
Entries matching this filter will be part of that group.
Can Grafana deal with this?