LDAP Groups Request

[rizlo100]

Currently we are using OpenLDAP to auth users in cacti. There are some problems with this, mainly you still need to create the accounts within cacti and assign permissions.

I would like to be able to assign the cacti permissions to a group within my LDAP. That way, as long as users are part of that group, they can log in, and they get the permissions I've assigned in cacti to that group.


Unless I've completely missed something, this can't be done under the current version.

[gandalf]

You can't offload permissions to LDAP, that's correct.
Best match would be to create different "template users".
IMHO, we have no plans to move that way ...
R.

[TheWitness]

The Domains plugin might help here.

[yousillygoose]

I actually like this idea a lot. We have a product that we purchased that works a similar way:

You define group buckets with a set permission scheme on the cacti end. You pair this to ldap to say that anyone that meets these criteria should fall into this gruop bucket. This would allow you to do group authentication. You can always have a default bucket if they don't fall into an upper group. This would help on our end because we could simply add a security group to cacti and anyone found in it could be an admin of the tool.