Hello,
I have 2 different Grafana servers running. I want to set SSO so I could access to both servers by logging in only one of the servers without running additional LDAP server. any suggestion?
thank you
Hello,
I have 2 different Grafana servers running. I want to set SSO so I could access to both servers by logging in only one of the servers without running additional LDAP server. any suggestion?
thank you
You only option is to put your two grafana serves behind an nginx/apache reverse proxy and handle auth in that proxy, then setup grafana to use proxy auth
http://docs.grafana.org/installation/configuration/#auth-proxy
I did try setting reverse proxy like below making a vhost_alias.conf file, which doesn’t work. What could I edit in this file to make it work?
(grafana server #1 - localhost, grafana server #2 - 111.111.111.11)
<VirtualHost *:80>
ServerAdmin webmaster@authproxy
ServerName authproxy
ErrorLog "logs/authproxy-error_log"
CustomLog "logs/authproxy-access_log" common
<Proxy *>
AuthType Basic
AuthName GrafanaAuthProxy
AuthBasicProvider file
AuthUserFile /etc/apache2/grafana_htpasswd
Require valid-user
RewriteEngine On
RewriteRule .* - [E=PROXY_USER:%{LA-U:REMOTE_USER},NS]
RequestHeader set X-WEBAUTH-USER "%{PROXY_USER}e"
</Proxy>
RequestHeader unset Authorization
ProxyRequests Off
ProxyPass / http://grafana.staged-by-discourse.com/
ProxyPass / http://111.111.111.11:3000/
ProxyPassReverse / http://grafana.staged-by-discourse.com/
ProxyPassReverse / http://111.111.111.11:3000/
</VirtualHost>
Use this configuration format in apache2.
<VirtualHost *:80>
ServerAdmin webmaster@authproxy
ServerName authproxy
ErrorLog “logs/authproxy-error_log”
CustomLog “logs/authproxy-access_log” common
<Proxy *>
AuthType Basic
AuthName GrafanaAuthProxy
AuthBasicProvider file
AuthUserFile /etc/apache2/grafana_htpasswd
Require valid-user
RewriteEngine On
RewriteRule .* - [E=PROXY_USER:%{LA-U:REMOTE_USER},NS]
RequestHeader set X-WEBAUTH-USER "%{PROXY_USER}e"
</Proxy>
RequestHeader unset Authorization
ProxyRequests Off
ProxyPass / http://grafana.staged-by-discourse.com/
ProxyPass /grafana http://111.111.111.11:3000/
ProxyPassReverse / http://grafana.staged-by-discourse.com/
ProxyPassReverse /grafana http://111.111.111.11:3000/
configure root_url in respective grafana also.