MISP/MISP

LDAP authentication with few roles

Aperta

#6445 aperta il 15 ott 2020

 (1 commento) (0 reazioni) (0 assegnatari)PHP (1306 fork)batch import
T: supportauthenticationhelp wanted

Metriche repository

Star
 (4600 stelle)
Metriche merge PR
 (Merge medio 17g 10h) (50 PR mergiate in 30 g)

Descrizione

Please consider the following notes

The official documentation of MISP can be found here: https://www.circl.lu/doc/misp/ We also periodically do user/admin/developer trainings and have our training material online: https://www.circl.lu/services/misp-training-materials/

Nevertheless you can of course file a Support request as an issue. Please be as precise as possible and fill the template as detailed as possible too. Please remove this text until the line below. Thanks a lot. --------8<------

Work environment

Questions Answers
Type of issue Support
OS version (server) RedHat
OS version (client) 7
PHP version 7.4
MISP version / git hash 2.4.132
Browser Chrome/Firefox

Support Questions

Do you know guys is there possible to configure LDAP authentication for few MISP roles? For example I would like to assign:

[Some LDAP Group 1] <====> [MISP role Admin] [Some LDAP Group 2] <====> [MISP role User]

Should I add other instance here?

'ApacheSecureAuth' => array( 'apacheEnv' => 'REMOTE_USER', 'ldapServer' => 'ldap://your_domain_controller', 'ldapProtocol' => 3, 'ldapNetworkTimeout' => -1,
// Note that we need a service account here. 'ldapReaderUser' => 'CN=service_account_name,OU=Users,DC=domain,DC=net', 'ldapReaderPassword' => 'password', 'ldapDN' => 'OU=Users,DC=domain,DC=net', 'ldapSearchFilter' => '', // I don't use that. Maybe you should 'ldapSearchAttribut' => 'userprincipalname', // Make sure this match and works for you 'ldapFilter' => array('mail',), 'ldapDefaultRoleId' => 3, // this will create users 'ldapDefaultOrg' => '1', // uses 1st local org in MISP if undefined, 'ldapAllowReferrals' => false, // allow or disallow chasing LDAP referrals - see what works for you. default is true 'ldapEmailField' => array('mail'), // whatever works for you ),

Logs, screenshots, configuration dump, ...

Used Configuration: https://github.com/MISP/MISP/issues/6189

Guida contributor