Is it possible to create contact groups automatically by querying the LDAP server?
LDAP Version = 3
When I do an LDAP search for a particular user, I see that he is part of 4-5 groups, so my question was can I create those groups automatically, when the particular LDAP user is synced?
For example, when I do a Save& Test, I see that 320 users are found and 6765 groups found for synchronization. But when I check a particular user randonly, I don’t see anything in the contact groups.
As there are usually way more groups defined in LDAP than needed in checkmk the groups are not synced automatically.
You have to create the groups you need in WATO -> Contact Groups and make sure that the group name equals the group’s CN in LDAP.
Thanks for your response. If I understand you correctly, I need to first manually create the contact groups via WATO or the WebAPI that I need in Checkmk with the name as the group’s CN in LDAP.
And then just need to perform the LDAP search for only those interested groups in the Group section of the LDAP connection and then the users will be assigned to the respective contact groups.
Is my understanding correct ?
Same thing has to be done for roles as well ?
Yes.
You do not need to filter the groups in the LDAP query.
If you want to assign roles based on LDAP group membership you need to specify the fill group DN for the respective role. This has nothing to do with contact group membership synchronization.
Thank you. Another question is about the name of the contact groups:
I have a group CN name in LDAP i.e. Team abc def with spaces after each word.
Can we handle this in Checkmk ? Because when I try to add this kind of contact group it throws an exception saying no spaces allowed.
Spaces in group names are currently not supported. This should be reported to the developers.
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
