We have a requirement to allow all users in LDAP access to the CheckMK GUI - I think we’d like them to be guest users (which I think allows them to see hosts / services being monitored, without being able to do anything to the monitoring config).
We have a couple of LDAP groups which we use to assign some users to ‘Users’ role - however it seems that everyone is being placed in users (even those not in the LDAP groups) so I’m assuming the default is ‘user’ - I’d like to change that default to ‘guest’ - how do I do that ?
Thanks.
PS (not sure if this is relevant) all hosts / rules etc are in the main folder (and likely to remain that way for a while)
there is a global setting “Default user profile”.
But I would prefer to only import and match users being in specific groups for your roles rather than not assigning roles and hoping for a good default
I’m trying to migrate an environment using a very old version of checkmk to enterprise, the old version seems to use the same ldap config and manages to place any users without a group into guest (so I guess its using the same gloabl config, but its all configured via config files so I’m struggling to translate config files to actual GUI / API).
Do you happen to know if that can be modified via the API ?
I doubt that I’d get much traction with the LDAP folks if I ask for several thousand users to be placed in an LDAP group !
