# Ldap configuration not wroking **URL:** \ **Category:** Percona Monitoring and Management (PMM)\ **Created:** [June 14, 2022, 8:50am UTC](https://forums.percona.com/t/ldap-configuration-not-wroking/16120 "2022-06-14T08:50:57Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![Kotha\_Sambashiva\_Rao](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/kotha_sambashiva_rao/32/6315_2.png) [@Kotha\_Sambashiva\_Rao](https://forums.percona.com/u/Kotha_Sambashiva_Rao)\ **Post date:** [June 14, 2022, 8:50am UTC](https://forums.percona.com/t/ldap-configuration-not-wroking/16120/1 "2022-06-14T08:50:57Z")
Hi, Followed same as mentioned in below doc > **[Enable LDAP on Percona Monitoring and Management (PMM) - Percona Database...](https://www.percona.com/blog/2020/01/08/enable-ldap-on-percona-monitoring-and-management-pmm/)** > > Support for LDAP arrived at PMM version 2 thanks to the new version of Grafana, and here's how to configure it. but not able to authenticate user, tried to enable logs by changing log level to debug in ldap.toml file but i am not able to get logs file in /var/log/grafana ---
**Author:** ![Kotha\_Sambashiva\_Rao](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/kotha_sambashiva_rao/32/6315_2.png) [@Kotha\_Sambashiva\_Rao](https://forums.percona.com/u/Kotha_Sambashiva_Rao)\ **Post date:** [June 23, 2022, 8:37am UTC](https://forums.percona.com/t/ldap-configuration-not-wroking/16120/2 "2022-06-23T08:37:57Z")
@matthewb can u pls look into this ---
**Author:** ![matthewb](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/matthewb/32/34_2.png) [@matthewb](https://forums.percona.com/u/matthewb)\ **Post date:** [June 23, 2022, 1:41pm UTC](https://forums.percona.com/t/ldap-configuration-not-wroking/16120/3 "2022-06-23T13:41:27Z")
@Kotha_Sambashiva_Rao, You have provided no logs, no info, no steps, no information at all. I’m not sure how you expect me to help when I know nothing about what is going on. ---
**Author:** ![Kotha\_Sambashiva\_Rao](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/kotha_sambashiva_rao/32/6315_2.png) [@Kotha\_Sambashiva\_Rao](https://forums.percona.com/u/Kotha_Sambashiva_Rao)\ **Post date:** [June 28, 2022, 7:25am UTC](https://forums.percona.com/t/ldap-configuration-not-wroking/16120/4 "2022-06-28T07:25:39Z")
@matthewb this edited in /etc/grafana/grafana.ini ![image](https://us1.discourse-cdn.com/flex019/uploads/percona1/original/2X/d/d16876b793d1a8b3dff6852b3987031dbe344dcf.png) my ldap.toml file ```auto [log] filters = ldap:debug [[servers]] # Ldap server host (specify multiple hosts space separated) host = "" # Default port is 389 or 636 if use_ssl = true port = 636 # Set to true if LDAP server should use an encrypted TLS connection (either with STARTTLS or LDAPS) use_ssl = true # If set to true, use LDAP with STARTTLS instead of LDAPS start_tls = false # set to true if you want to skip ssl cert validation ssl_skip_verify = false # set to the path to your root CA certificate or leave unset to use system defaults # root_ca_cert = "/path/to/certificate.crt" # Authentication against LDAP servers requiring client certificates # client_cert = "/path/to/client.crt" # client_key = "/path/to/client.key" # Search user bind dn bind_dn = "cn=,ou=users,dc=,dc=,dc=com" # Search user bind password # If the password contains # or ; you have to wrap it with triple quotes. Ex """#password;""" bind_password = '' # User search filter, for example "(cn=%s)" or "(sAMAccountName=%s)" or "(uid=%s)" search_filter = "(cn=%uid)" # An array of base dns to search through search_base_dns = ["dc=,dc=,dc=com"] ## For Posix or LDAP setups that does not support member_of attribute you can define the below settings ## Please check grafana LDAP docs for examples # group_search_filter = "(&(objectClass=posixGroup)(memberUid=%s))" # group_search_base_dns = ["ou=groups,dc=grafana,dc=org"] # group_search_filter_user_attribute = "uid" # Specify names of the ldap attributes your ldap uses [servers.attributes] name = "givenName" surname = "sn" username = "cn" member_of = "memberOf" email = "email" # Map ldap groups to grafana org roles [[servers.group_mappings]] group_dn = "cn=admins,ou=groups,dc=grafana,dc=org" org_role = "Admin" # To make user an instance admin (Grafana Admin) uncomment line below # grafana_admin = true # The Grafana organization database id, optional, if left out the default org (id 1) will be used # org_id = 1 [[servers.group_mappings]] group_dn = "cn=users,ou=groups,dc=grafana,dc=org" org_role = "Editor" [[servers.group_mappings]] # If you want to match all (or no ldap groups) then you can use wildcard group_dn = "*" org_role = "Viewer" ``` Error in ui ![image](https://us1.discourse-cdn.com/flex019/uploads/percona1/original/2X/8/833b4be23426326daac26a451ce750d3376d5aad.png) Not able to get logs though i enabled debug mode ---
**Author:** ![Kotha\_Sambashiva\_Rao](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/kotha_sambashiva_rao/32/6315_2.png) [@Kotha\_Sambashiva\_Rao](https://forums.percona.com/u/Kotha_Sambashiva_Rao)\ **Post date:** [July 1, 2022, 5:35am UTC](https://forums.percona.com/t/ldap-configuration-not-wroking/16120/6 "2022-07-01T05:35:35Z")
@matthewb Can you pls let me know where am i going wrong Tried multiple changes to get it working ---
**Author:** ![matthewb](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/matthewb/32/34_2.png) [@matthewb](https://forums.percona.com/u/matthewb)\ **Post date:** [July 1, 2022, 3:06pm UTC](https://forums.percona.com/t/ldap-configuration-not-wroking/16120/7 "2022-07-01T15:06:11Z")
I’m not familiar with LDAP.