LDAP Authentication in AWX

Archives AWX Project
1

Hi Team,

Can you please suggest me the method of testing and confirming the LDAP user authentication is working or not.

If I have AWX inside docker then the configuration has to be done inside docker or not.

I have an active connection between my LDAP server and my AWX machine and I am successfully able to do ldapsearch also there is a kerberos authentication happening .

I have followed the steps mentioned in the Ansible docs for LDAP Authentication which is in the beow link.
https://docs.ansible.com/ansible-tower/latest/html/administration/ldap_auth.html

However I wanted to understand how do I validate the successful LDAP authentication.

Thanks & Regards
Monohar Behera

2

LDAP configuration needs to be done in the AWX UI. Check Tower documentation about how to configure LDAP.

3

We have done the required configuration on the UI as suggested in the Ansible Tower document, How ever that does not work and I wanted to understand how do we validate the LDAP authentication is enabled or not.

We have followed every step which was given in Ansible tower guide. However the LDAP users which are present in my LDAP server are not able to Authenticate in AWX UI.

Please do suggest how do we test and validate the same.

Regards
Monohar Behera

4

You can tail the awx_web container and see what the authentication is.

5

First, do you have any users in the AD group which is provided in ‘LDAP Require Group’. If not add the ad user in the group.

Then the same AD user needs to login to the tower once to authenticate (at this point user will not have any access on tower resources except to login)and to be displayed inside the tower.

Then after successful tower login of user, tower admin user should be able to search the AD user while providing permissions on templates or organisations or adding users to teams or any other permission stuff.

Try it and let me know how it goes.

Thanks and Regards
Mani Mohan

6

Please use container log to check the functionality of LDAP.

7

Last time I was facing this issue, I got to know that we had to use some organization certificates to use LDAP, not sure if you have the same case. What you can do it test LDAP connection by logging into the container and running the browse commands. This is what I did to test in our case.