Hello,
I am trying to configure Active Directory authentication on my Observium CE v20.9.10731 server using this page as a guide ->
https://docs.observium.org/authentication/#active-directory
I am passed the point where my username and password are authenticated.
It is the group config I am confused about.
I have an Active Directory group “eng-admins” that I want to give administrative privileges to, of which my login (bbianchi) is a member.
And I have an Active Directory group “eng-team” that I want to give generic non-admin privileges.
My domain is hq.viviport.com.
It is not clear to me how to configure these lines to achieve this:
$config['auth_ldap_recursive'] = TRUE;
$config['auth_ldap_recursive_maxdepth'] = 3;
$config['auth_ldap_prefix'] = "CN=";
$config['auth_ldap_suffix'] = ",DC=hq,DC=viviport,DC=com";
$config['auth_ldap_group'] = array("CN=Observium Users,OU=Groups,DC=hq,DC=viviport,DC=com");
$config['auth_ldap_groupbase'] = "OU=Groups,DC=hq,DC=viviport,DC=com";
$config['auth_ldap_groupmembertype'] = "fulldn";
$config['auth_ldap_groupmemberattr'] = "member";
unset($config['auth_ldap_groups']);
$config['auth_ldap_groups']['CN=Observium Admins,OU=Groups,DC=hq,DC=viviport,DC=com']['level'] = 10;
$config['auth_ldap_groups']['CN=Observium Users,OU=Groups,DC=hq,DC=viviport,DC=com']['level'] = 1;
I have enabled debug logging. Here is what I am getting below. Any help would be greatly appreciated. Thank you in advance.
--B
|
|
|
|
|
Brian Bianchi |
|
|
|
|
Learn more about Vestmark! View our introduction video
here. |
|
|
Check us out on Social Media: |
|
|
|
|
|
|
This e-mail and any attachments hereto, are intended for use by the addressee(s) only and may contain information that is confidential information of Vestmark, Inc. If you are not the intended recipient of
this e-mail, or if you have otherwise received |