# LDAP Authentication in AWX

**URL:** <https://forum.ansible.com/t/ldap-authentication-in-awx/33200>\
**Category:** AWX Project\
**Tags:** awx\
**Created:** [June 17, 2020, 2:13pm UTC](https://forum.ansible.com/t/ldap-authentication-in-awx/33200 "2020-06-17T14:13:19Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![monohara\_behera](https://avatars.discourse-cdn.com/v4/letter/m/67e7ee/32.png) [@monohara\_behera](https://forum.ansible.com/u/monohara_behera)\
**Post date:** [June 17, 2020, 2:13pm UTC](https://forum.ansible.com/t/ldap-authentication-in-awx/33200/1 "2020-06-17T14:13:19Z")

</div>

Hi Team,

Can you please suggest me the method of testing and confirming the LDAP user authentication is working or not.

If I have AWX inside docker then the configuration has to be done inside docker or not.

I have an active connection between my LDAP server and my AWX machine and I am successfully able to do ldapsearch also there is a kerberos authentication happening .

I have followed the steps mentioned in the Ansible docs for LDAP Authentication which is in the beow link.  
[https://docs.ansible.com/ansible-tower/latest/html/administration/ldap\_auth.html](https://docs.ansible.com/ansible-tower/latest/html/administration/ldap_auth.html)

However I wanted to understand how do I validate the successful LDAP authentication.

Thanks & Regards  
Monohar Behera

---

<div class="post-metadata">

**Author:** ![Ankit2](https://avatars.discourse-cdn.com/v4/letter/a/ea5d25/32.png) [@Ankit2](https://forum.ansible.com/u/Ankit2)\
**Post date:** [June 18, 2020, 2:58pm UTC](https://forum.ansible.com/t/ldap-authentication-in-awx/33200/2 "2020-06-18T14:58:03Z")

</div>

LDAP configuration needs to be done in the AWX UI. Check Tower documentation about how to configure LDAP.

---

<div class="post-metadata">

**Author:** ![monohara\_behera](https://avatars.discourse-cdn.com/v4/letter/m/67e7ee/32.png) [@monohara\_behera](https://forum.ansible.com/u/monohara_behera)\
**Post date:** [June 19, 2020, 9:02am UTC](https://forum.ansible.com/t/ldap-authentication-in-awx/33200/3 "2020-06-19T09:02:26Z")

</div>

We have done the required configuration on the UI as suggested in the Ansible Tower document, How ever that does not work and I wanted to understand how do we validate the LDAP authentication is enabled or not.

We have followed every step which was given in Ansible tower guide. However the LDAP users which are present in my LDAP server are not able to Authenticate in AWX UI.

Please do suggest how do we test and validate the same.

Regards  
Monohar Behera

---

<div class="post-metadata">

**Author:** ![Wei-Yen\_Tan](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/wei-yen_tan/32/4111_2.png) [@Wei-Yen\_Tan](https://forum.ansible.com/u/Wei-Yen_Tan)\
**Post date:** [June 19, 2020, 9:04am UTC](https://forum.ansible.com/t/ldap-authentication-in-awx/33200/4 "2020-06-19T09:04:47Z")

</div>

You can tail the awx\_web container and see what the authentication is.

---

<div class="post-metadata">

**Author:** ![Mani\_Mohan](https://avatars.discourse-cdn.com/v4/letter/m/8baadc/32.png) [@Mani\_Mohan](https://forum.ansible.com/u/Mani_Mohan)\
**Post date:** [June 19, 2020, 9:23am UTC](https://forum.ansible.com/t/ldap-authentication-in-awx/33200/5 "2020-06-19T09:23:14Z")

</div>

First, do you have any users in the AD group which is provided in ‘LDAP Require Group’. If not add the ad user in the group.

Then the same AD user needs to login to the tower once to authenticate (at this point user will not have any access on tower resources except to login)and to be displayed inside the tower.

Then after successful tower login of user, tower admin user should be able to search the AD user while providing permissions on templates or organisations or adding users to teams or any other permission stuff.

Try it and let me know how it goes.

Thanks and Regards  
Mani Mohan

---

<div class="post-metadata">

**Author:** ![Selvam\_Elangovan](https://avatars.discourse-cdn.com/v4/letter/s/8c91f0/32.png) [@Selvam\_Elangovan](https://forum.ansible.com/u/Selvam_Elangovan)\
**Post date:** [June 19, 2020, 11:07am UTC](https://forum.ansible.com/t/ldap-authentication-in-awx/33200/6 "2020-06-19T11:07:43Z")

</div>

Please use container log to check the functionality of LDAP.

---

<div class="post-metadata">

**Author:** ![Ankit2](https://avatars.discourse-cdn.com/v4/letter/a/ea5d25/32.png) [@Ankit2](https://forum.ansible.com/u/Ankit2)\
**Post date:** [June 20, 2020, 7:58am UTC](https://forum.ansible.com/t/ldap-authentication-in-awx/33200/7 "2020-06-20T07:58:27Z")

</div>

Last time I was facing this issue, I got to know that we had to use some organization certificates to use LDAP, not sure if you have the same case. What you can do it test LDAP connection by logging into the container and running the browse commands. This is what I did to test in our case.
