grafana/devenv/docker/blocks/openldap/notes.md

Notes on OpenLdap Docker Block

Any ldif files added to the prepopulate subdirectory will be automatically imported into the OpenLdap database.

Note that users that are added here need to specify a memberOf attribute manually as well as the member attribute for the group. The memberOf module usually does this automatically (if you add a group in Apache Directory Studio for example) but this does not work in the entrypoint script as it uses the slapadd command to add entries before the server has started and before the memberOf module is loaded.

After adding ldif files to prepopulate:

1. Remove your current docker image: docker rm docker_openldap_1
2. Build: docker-compose build
3. docker-compose up

Enabling LDAP in Grafana

If you want to use users/groups with memberOf support Copy the ldap_dev.toml file in this folder into your conf folder (it is gitignored already). To enable it in the .ini file to get Grafana to use this block:

[auth.ldap]
enabled = true
config_file = conf/ldap_dev.toml
; allow_sign_up = true

Otherwise perform same actions for ldap_dev_posix.toml config.

Groups & Users

• admins
  • ldap-admin
  • ldap-torkel
• backend
  • ldap-carl
  • ldap-torkel
  • ldap-leo
• frontend
  • ldap-torkel
  • ldap-tobias
  • ldap-daniel
• editors
  • ldap-editors
• no groups
  • ldap-viewer

Groups & Users (POSIX)

• admins
  • ldap-posix-admin
• no groups
  • ldap-posix