LDAP Group Mappings not working with ldap.toml

Grafana Authentication
1
  • What Grafana version and what operating system are you using?

Grafana Open Source 12.1.1 on Windows

  • What are you trying to achieve?

Use Group Mappings

  • How are you trying to achieve it?

I have my ldap.toml and my config looks like this:

[[servers.group_mappings]]
group_dn = “*”
org_role = “Admin”
grafana_admin = true
org_id = 1

Neither wildcard (“*”) nor anything else works BUT if I use the LDAP UI with either wildcard or the correct group_dn (something like “cn=editors,ou=groups,dc=grafana,dc=org”) it works.

  • What happened?

Group Mappings configured in the ldap.toml are ignored, Mappings configured via UI are working. I am NOT using both at the same time

  • What did you expect to happen?

Group Mappings working the same way

  • Can you copy/paste the configuration(s) that you are having problems with?

[[servers]]
host = “xxx”
port = 636
use_ssl = true
start_tls = false
ssl_skip_verify = false
root_ca_cert = “D:/Grafana/RootCert.cer”

bind_dn = “xxx\%s”
timeout = 10
search_filter = “(sAMAccountName=%s)”
search_base_dns = [“dc=xxx,dc=xxx,dc=com”]

[servers.attributes]
name = “givenName”
surname = “sn”
username = “cn”
member_of = “memberOf”
email = “mail”

[[servers.group_mappings]]
group_dn = “*”
org_role = “Admin”
grafana_admin = true
org_id = 1

  • Did you receive any errors in the Grafana UI or in related logs? If so, please tell us exactly what they were.

No Errors, debug logging is enabled. All other configuration done via ldap.toml works as expected, its just the group_mappings part

  • Did you follow any online instructions? If so, what is the URL?

Configure LDAP authentication | Grafana documentation

I am using the UI right now as a “workaround”, but as I configured everything else via the config file, it feels kinda bad.

Thanks in advance for any help :slight_smile: