Hello,
I’ve got the LDAP module to work, but now the wrong username is set.
This is my config:
authentication_backend:
# LDAP authentication backend (authenticate users against a LDAP or Active Directory)
type: ldap # NOT FREE FOR COMMERCIAL USE
config:
# enable ldaps
enable_ssl: false
# enable start tls, enable_ssl should be false
enable_start_tls: false
# send client certificate
enable_ssl_client_auth: false
# verify ldap hostname
verify_hostnames: true
hosts:
- url:port
# The DN to use when connecting to LDAP. If anonymous auth is allowed, can be set to null
bind_dn: null
# The password to use when connecting to LDAP. If anonymous auth is allowed, can be set to null
password: null
userbase: ‘ou=users,o=fem’
# Filter to search for users (currently in the whole subtree beneath userbase)
# {0} is substituted with the username
usersearch: ‘(uid={0})’ #(sAMAccountName={0})’
# Use this attribute from the user as username (if not set then DN is used)
username_attribute: uid
``
That’s whats getting logged when I’m logging in:
[2017-12-16T00:30:26,363][DEBUG][c.f.d.a.l.b.LDAPAuthorizationBackend] bindDn null, password
[2017-12-16T00:30:26,363][DEBUG][c.f.d.a.l.b.LDAPAuthorizationBackend] Will perform anonymous bind because to bind dn is given
[2017-12-16T00:30:26,387][DEBUG][c.f.d.a.l.b.LDAPAuthenticationBackend] Authenticated username uid=Grevius,ou=users,o=fem
``
And after that I’m always seeing this in the log:
User ‘User [name=uid=Grevius,ou=users,o=fem, roles=, requestedTenant=null, attributes={ldap.dn=uid=Grevius,ou=users,o=fem, ldap.original.username=grevius}]’ is authenticated
``
In Kibana on the top right corner also that username is shown: ‘‘uid=Grevius,ou=users,o=fem’’
Have I somehow misconfigured username_attribute?
ES 6.0.0
Kibana 6.0.0
with Search Guard 6.0.0-17.beta1 and Kibana plugin 6.0.0-6.beta1
Thank you in advance
Grevius