[google translate] Authorization and Authentication via LDAP works as expected, but I want to use internal authorization. That is, in config.yml I only have internal_auth and ldap_auth without authz. Is it possible to do this? or authorizing ldap users only through ldap. meaning in the picture […

Hi @rodigl Yes, you can do it simply by not enabling any authz in config.yml, However you would then need to map the roles to users via username, not backend role, as no backend roles will be provided from ldap. So in the screenshot you provided, use the usernames in the ‘Users’ section Hope thi…

ok great. really works, thanks. I have a user group in AD called ESadmins. Can I add a group instead of just one user?

@rodigl You can change the username_attribute in config.yml: to “memberOf”. This will give all your users same username in kibana, but will allow you to assign roles to just this one “user”. If that is what you are trying to achieve.

LDAP autification but local (http) authorization

Security

rodigl July 15, 2021, 3:04pm 6

Yes. Everything is working. Not much wrong, but it can be customized. Thank you so much.

Topic		Replies	Views
Create role for only LDAP Users Security	5	1379	February 9, 2021
LDAP group role mapping is not working Security troubleshoot	13	3419	January 17, 2022
Roles mapped to individual users from Backend roles Security configure	4	919	March 7, 2022
LDAP Authz for Group Membership Security	1	616	December 26, 2021
LDAP add permissions (authorize) to data Security	5	3130	August 14, 2019

LDAP autification but local (http) authorization

Related topics