wiki v1

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== LDAP Grafana ======
<code bash>
setsebool -P httpd_can_connect_ldap on
setsebool -P httpd_can_network_connect on
</code>

<code bash>
vim /etc/grafana/grafana.ini
[...]
#################################### Auth LDAP ##########################
[auth.ldap]
;enabled = false
enabled = true
config_file = /etc/grafana/ldap.toml
allow_sign_up = true
[...]
</code>

<code bash>
vim /etc/grafana/ldap.toml
[...]
[[servers]]
host = "sp-spo-ipa.juntotelecom.com.br"
port = 389
use_ssl = false
start_tls = false
ssl_skip_verify = false

bind_dn = "uid=webadm,cn=users,cn=accounts,dc=juntotelecom,dc=com,dc=br"
bind_password = '@btjt(())22'

search_filter = "(uid=%s)"
search_base_dns = ["cn=users,cn=accounts,dc=juntotelecom,dc=com,dc=br"]

[servers.attributes]
name = "givenName"
surname = "sn"
username = "cn"
member_of = "memberOf"
email =  "email"

[[servers.group_mappings]]
group_dn = "cn=grafanaadm,cn=groups,cn=accounts,dc=juntotelecom,dc=com,dc=br"
org_role = "Admin"

[[servers.group_mappings]]
group_dn = "cn=grafanamgm,cn=groups,cn=accounts,dc=juntotelecom,dc=com,dc=br"
org_role = "Editor"

[[servers.group_mappings]]
group_dn = "*"
org_role = "Viewer"
</code>