← Back to team overview

graphite-dev team mailing list archive

[Question #681227]: LDAP Authentication Not working in Graphite

 

New question #681227 on Graphite:
https://answers.launchpad.net/graphite/+question/681227

I have Installed Graphite in RHEL7 server. I have done the LDAP configuration in Graphite local_settings.py

## LDAP / ActiveDirectory authentication setup
USE_LDAP_AUTH = True
LDAP_SERVER = "ldap-test.com"
LDAP_PORT = 389
#LDAP_USE_TLS = False

## Manual URI / query setup
LDAP_URI = "ldap://ldap-test.com:389";
LDAP_SEARCH_BASE = "ou=xxxxx,dc=zxxxx"
LDAP_BASE_USER = "uid=xxxx,ou=xxxxx,cn=xxxxx"
LDAP_BASE_PASS = "xxxxx"
LDAP_USER_QUERY = "(sAMAccountName=%s)"  #For Active Directory use "(sAMAccountName=%s)"

# User DN template to use for binding (and authentication) against the
# LDAP server. %(username) is replaced with the username supplied at
# graphite login.
LDAP_USER_DN_TEMPLATE = "cn=% (username),ou=xxxxx,dc=xxxxx"

# If you want to further customize the ldap connection options you should
# directly use ldap.set_option to set the ldap module's global options.
# For example:
#
#import ldap
#ldap.set_option(ldap.OPT_X_TLS_REQUIRE_CERT, ldap.OPT_X_TLS_ALLOW) # Use #ldap.OPT_X_TLS_DEMAND to force TLS
#ldap.set_option(ldap.OPT_REFERRALS, 0) # Enable for Active Directory
#ldap.set_option(ldap.OPT_X_TLS_CACERTDIR, "/etc/ssl/ca")
#ldap.set_option(ldap.OPT_X_TLS_CERTFILE, "/etc/ssl/mycert.pem")
#ldap.set_option(ldap.OPT_X_TLS_KEYFILE, "/etc/ssl/mykey.pem")
#ldap.set_option(ldap.OPT_DEBUG_LEVEL, 65535) # To enable verbose debugging
# See http://www.python-ldap.org/ for further details on these options.

I have installed nginx and launched graphite in uwsgi service.

/etc/uwsgi.d/graphite.ini
[uwsgi]
processes = 2
socket = dewsttlcd018.de.pri.o2.com:3031
gid = graphite
uid = graphite
#virtualenv = /app/graphite
chdir = /app/graphite/conf
module = wsgi:application
logto = /app/graphite/storage/log/webapp/graphite.log

When I tried to login , it throws

"Authentication Attempt Failed,please make sure you entered your login and password correctly"

In logs also I'm unable to find the error messages. How to fix this issue.

-- 
You received this question notification because your team graphite-dev
is an answer contact for Graphite.