Ldap group mapping doesnot show ldap groups

group mapping list is not shown although the ldap server connection is useful. i want to get multiple ldap groups from active directory and assign them with the roles i have created. however ldap group mapping page doesnot list my active directory groups. any help would be great for me.

Did you check to see if the group filter query is correct? We use OpenLDAP and that works fine, I know Active Directory requires a few changes to the configuration for it to pick up groups properly but I have no experience with it.

I do recall someone else asked here recently so try a forum search, see what comes up :slight_smile:

I initially had some trouble with groups, turns out I wasnā€™t being patient enough (we have a very large AD).

Make sure your Group Mapping base DN is correct, and that you have some groups ready matching your search pattern. We use

(&(objectClass=group)(cn=gs-graylog-*))

And we have a number of groups such as ā€œgs-graylog-dashboard-allā€ etc.

Then on the group mappings page, load it and wait - There is no feedback, but after a while, a number of groups will show up and you can then map them to roles that you have defined.

1 Like

Awesome :slight_smile: I guess I didnā€™t think of that, we only have about 10 groups under the group search dn for Graylog so itā€™s near instant to loadā€¦ didnā€™t consider that if you have a larger setup that it may just take longer for things to show up :smiley:

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.