LDAP Configuration Help! :(

Graylog Central (peer support)
1

Hi,

We have many users in different OUs within our AD environment that needs access to graylog, but we only have LDAP config to look at 1 OU. Is there a way to set it to look at multiple OUs? Or is there a way to have graylog authenticate users that are part of a security group?

THank you!

2

In User mapping specify root OU under which all other OUs resides, and use Group mapping to grant access to Graylog.

3

If i do that, it will allow every user in the domain to log in. The group mapping doesnt seem to restrict.

4

There’s.

(&(objectClass=user)(sAMAccountName={0})(memberof=cn=GROUP,cn=users,dc=domain,dc=com))

That query asks for a user, who:

  • A user;
  • Has the sAMAccountName attribute;
  • is a member of the chosen security group.
5

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.