ldap.toml 1.2 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344
  1. # Set to true to log user information returned from LDAP
  2. verbose_logging = false
  3. [[servers]]
  4. # Ldap server host
  5. host = "127.0.0.1"
  6. # Default port is 389 or 636 if use_ssl = true
  7. port = 389
  8. # Set to true if ldap server supports TLS
  9. use_ssl = false
  10. # Search user bind dn
  11. bind_dn = "cn=admin,dc=grafana,dc=org"
  12. # Search user bind password
  13. bind_password = "grafana"
  14. # Search filter, for example "(cn=%s)" or "(sAMAccountName=%s)"
  15. search_filter = "(cn=%s)"
  16. # An array of base dns to search through
  17. search_base_dns = ["dc=grafana,dc=org"]
  18. # Specify names of the ldap attributes your ldap uses
  19. [servers.attributes]
  20. name = "givenName"
  21. surname = "sn"
  22. username = "cn"
  23. member_of = "memberOf"
  24. email = "email"
  25. # Map ldap groups to grafana org roles
  26. [[servers.group_mappings]]
  27. group_dn = "cn=admins,dc=grafana,dc=org"
  28. org_role = "Admin"
  29. # The Grafana organization database id, optional, if left out the default org (id 1) will be used
  30. # org_id = 1
  31. [[server.ldap_group_to_org_role_mappings]]
  32. group_dn = "cn=users,dc=grafana,dc=org"
  33. org_role = "Editor"
  34. [[servers.group_mappings]]
  35. # If you want to match all (or no ldap groups) then you can use wildcard
  36. group_dn = "*"
  37. org_role = "Viewer"