LDAP Configuration for OpenSearch Dashboard

OpenSearch Dashboards
1

Versions (relevant - OpenSearch/Dashboard/Server OS/Browser):
Opensearch-2.12.0
Dashboard-2.12.0
RHEL-8.8
Microsoft Edge-128.0.2739.67

Describe the issue:
I’ve implemented an OpenSearch cluster with 6 nodes (2 data, 3 master and 1 client) and also installed OpenSearch Dashboard and Logstash to my client node. I’ve created self-signed certificates for all of my nodes to make security plugin work and nodes recognizes themselves to get together as cluster. Now, I need to integrate LDAP only to my dashboard but have no idea how to? Does anybody have knowledge of the process?

Configuration:

Relevant Logs or Screenshots:

2

@bugravibes OpenSearch dashboards doesn’t require any additional configuration.
You need to keep basic authentication in opensearch_dashboards.yml.

opensearch_security.auth.type

Do you have any issues with LDAP authentication/authorization? If so, please share the errors and config.yml file.

3

Hi @pablo , I need to implement LDAP Authentication to my OpenSearch Dashboard to integrate the Dashboard into our corporate system, I’ve requested and got the LDAP server’s domains but do not know where to start or what to do, any help would’ve appreciated. Thanks, looking forward to your reply.

4
  • Does it effect my cluster’s nodes’ communication since I’ve defined self-signed certificates for them.
5

Node’s self-signed certificates don’t take the part in the LDAP authentication/authorization.
These certs are used for Transport (9300-9400) and HTTP/API (9200) communication.

Have you followed OpenSearch documentation? It contains an example LDAP configuration.