I think I have it working, using clues found in includes/defaults.inc.php
$config['auth_mechanism'] = "ldap"; $config['auth_ldap_version'] = 3; $config['auth_ldap_server'] = "ldap.example.net"; $config['auth_ldap_port'] = 389; $config['auth_ldap_starttls'] = FALSE; $config['auth_ldap_prefix'] = "uid="; $config['auth_ldap_suffix'] = ",ou=People,dc=example,dc=net"; $config['auth_ldap_group'] = "cn=observium,ou=Groups,dc=example,dc=net"; $config['auth_ldap_groupbase'] = "ou=Groups,dc=example,dc=net";
// $config['auth_ldap_groupmembertype'] = "nodn"; // Available membertypes: 'nodn' (default, used $username); // 'fulldn' ($config['auth_ldap_prefix'] . $username . $config['auth_ldap_suffix']) $config['auth_ldap_groupmembertype'] = "fulldn";
// $config['auth_ldap_groupmemberattr'] = "memberUid"; $config['auth_ldap_groupmemberattr'] = "uniquemember"; // Use your unique attribute for username, example "uniqueMember".
$config['auth_ldap_groups']['observium-admin']['level'] = 10; $config['auth_ldap_groups']['observium-support']['level'] = 1;
I hope this helps out others.
Thanks for the fantastic app Adam!
Tracy
On May 30, 2013, at 9:27 AM, Tracy Phillips tracphil@mantoso.com wrote:
Hi,
I have configured Observium to authenticate against ldap and it works great. This is my configuration for authentication:
$config['auth_mechanism'] = "ldap"; $config['auth_ldap_version'] = 3; $config['auth_ldap_server'] = "ldap.example.net"; $config['auth_ldap_port'] = 389; $config['auth_ldap_starttls'] = FALSE; $config['auth_ldap_prefix'] = "uid="; $config['auth_ldap_suffix'] = ",ou=People,dc=example,dc=net"; $config['auth_ldap_group'] = "cn=observium,ou=Groups,dc=example,dc=net";
Everything works as expected until I get to this point. When I go to add a new device or view the global configuration, I get the message:
ERROR You have insufficient permissions to view this page.
I have confirmed that I am in the observium-admin group. This is what I have for group permissions:
$config['auth_ldap_groupbase'] = "ou=Groups,dc=example,dc=net"; $config['auth_ldap_groups']['observium-admin']['level'] = 10;
There is nothing relevant in the observium.log.
Is there something that I am missing or does anyone have thought that might help me resolve this issue?
Thanks in advance for any hints you can throw my way!
Tracy
observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium