public/grafana
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Devenv: Fix openldap-multiple dev environment (#75013)

Browse Source
This commit is contained in:
Gabriel MABILLE
2023-09-18 17:21:59 +03:00
committed by GitHub
parent ab75fbd009
commit 4280e31239
20 changed files with 206 additions and 432 deletions
Download Patch File Download Diff File Expand all files Collapse all files
devenv/docker/blocks/auth/openldap-multiple/ldap_dev.toml
+48 -28
View File
@@ -4,18 +4,21 @@
# For the verbose comments options see "openldap" env block
# --- First LDAP Server (only admins) ---
# --- First LDAP Server ---
[[servers]]
host = "127.0.0.1"
port = 389
use_ssl = false
start_tls = false
tls_ciphers = []
min_tls_version = ""
ssl_skip_verify = false
bind_dn = "cn=admin,dc=grafana,dc=org"
timeout = 10
bind_dn = "cn=admin,dc=srv1-grafana,dc=org"
bind_password = 'grafana'
search_filter = "(cn=%s)"
search_base_dns = ["ou=users,dc=grafana,dc=org"]
search_base_dns = ["dc=srv1-grafana,dc=org"]
[servers.attributes]
name = "givenName"
@@ -24,36 +27,53 @@ username = "cn"
member_of = "memberOf"
email = "email"
# Map ldap groups to grafana org roles
[[servers.group_mappings]]
group_dn = "cn=admins,ou=groups,dc=grafana,dc=org"
group_dn = "cn=admins,ou=groups,dc=srv1-grafana,dc=org"
org_role = "Admin"
grafana_admin = true
# --- Second LDAP Server (rest of the users) ---
[[servers]]
host = "127.0.0.1"
port = 388
use_ssl = false
start_tls = false
ssl_skip_verify = false
bind_dn = "cn=admin,dc=grafana,dc=org"
bind_password = 'grafana'
search_filter = "(cn=%s)"
search_base_dns = ["ou=users,dc=grafana,dc=org"]
[servers.attributes]
name = "givenName"
surname = "sn"
username = "cn"
member_of = "memberOf"
email = "email"
[[servers.group_mappings]]
group_dn = "cn=editors,ou=groups,dc=grafana,dc=org"
group_dn = "cn=editors,ou=groups,dc=srv1-grafana,dc=org"
org_role = "Editor"
[[servers.group_mappings]]
group_dn = "*"
org_role = "Viewer"
# --- Second LDAP Server ---
[[servers]]
host = "127.0.0.1"
port = 1389
use_ssl = false
start_tls = false
tls_ciphers = []
min_tls_version = ""
ssl_skip_verify = false
timeout = 10
bind_dn = "cn=admin,dc=srv2-grafana,dc=org"
bind_password = 'grafana'
search_filter = "(cn=%s)"
search_base_dns = ["dc=srv2-grafana,dc=org"]
[servers.attributes]
name = "givenName"
surname = "sn"
username = "cn"
member_of = "memberOf"
email = "email"
# Map ldap groups to grafana org roles
[[servers.group_mappings]]
group_dn = "cn=admins,ou=groups,dc=srv2-grafana,dc=org"
org_role = "Admin"
[[servers.group_mappings]]
group_dn = "cn=editors,ou=groups,dc=srv2-grafana,dc=org"
org_role = "Editor"
[[servers.group_mappings]]
group_dn = "*"
org_role = "Viewer"