ldap.toml 1.2 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546
  1. # Set to true to log user information returned from LDAP
  2. verbose_logging = false
  3. [[servers]]
  4. # Ldap server host
  5. host = "127.0.0.1"
  6. # Default port is 389 or 636 if use_ssl = true
  7. port = 389
  8. # Set to true if ldap server supports TLS
  9. use_ssl = false
  10. # set to true if you want to skip ssl cert validation
  11. ssl_skip_verify = false
  12. # Search user bind dn
  13. bind_dn = "cn=admin,dc=grafana,dc=org"
  14. # Search user bind password
  15. bind_password = 'grafana'
  16. # Search filter, for example "(cn=%s)" or "(sAMAccountName=%s)"
  17. search_filter = "(cn=%s)"
  18. # An array of base dns to search through
  19. search_base_dns = ["dc=grafana,dc=org"]
  20. # Specify names of the ldap attributes your ldap uses
  21. [servers.attributes]
  22. name = "givenName"
  23. surname = "sn"
  24. username = "cn"
  25. member_of = "memberOf"
  26. email = "email"
  27. # Map ldap groups to grafana org roles
  28. [[servers.group_mappings]]
  29. group_dn = "cn=admins,dc=grafana,dc=org"
  30. org_role = "Admin"
  31. # The Grafana organization database id, optional, if left out the default org (id 1) will be used
  32. # org_id = 1
  33. [[servers.group_mappings]]
  34. group_dn = "cn=users,dc=grafana,dc=org"
  35. org_role = "Editor"
  36. [[servers.group_mappings]]
  37. # If you want to match all (or no ldap groups) then you can use wildcard
  38. group_dn = "*"
  39. org_role = "Viewer"