[15:36:41] Folks I'm troubleshooting a user who is having problems logging in to Grafana [15:37:04] I only recently set up their LDAP group membership [15:37:28] From the LDAP auth / CAS perspective the login appears ok, there isn't anything special/additional about Grafana to be aware of is there? [15:38:28] grafana doesn't auto-create users on first login, there's a cron job (well a systemd timer) on the grafana hosts that needs to actually create the user account for all users in the relevant ldap groups [15:38:52] taavi: thanks a bunch. I suspected there may be something like that. [15:50:24] That service failed last night for some reason actually. [15:51:03] Is it ok to try to run the import script manually as a one off on grafana1002? [15:51:39] Failure in the logs last night as follows, this seems to happen occasionally (previous was back in Sept): [15:51:45] https://www.irccloud.com/pastebin/3PD0IuXS/ [16:27:28] topranks: ran it just now and Jan 13 16:23:18 grafana1002 systemd[1]: grafana-ldap-users-sync.service: Succeeded [16:28:26] herron: Cool thanks for that. [16:28:40] I'll get the user to retry see if they can log in now. [16:28:48] what is the uid? [16:29:03] username really [16:37:47] They've yet to retry. LDAP CN is "Marco Fossati" and uid is "mfossati" [16:37:59] Previous errors were showing in Grafana log like this [16:38:01] 15:27:51+0000 lvl=eror msg="Failed to login" logger=auth.proxy username=mfossati message="failed to log in as user, specified in auth proxy header" error="invalid username or password" ignoreCache=false [16:38:31] ok, I do see that user present in grafana users now [16:38:40] Looked very much like CAS/LDAP completed login but Grafana then didn't like something. So I'm hopeful it'll work after you running that [16:38:43] great! [16:39:00] Where can you see the Grafana local users? [16:41:58] https://grafana-rw.wikimedia.org/org/users [16:42:13] Super thanks :) [16:42:17] np! [16:42:22] User just confirmed it's working for them now too. Nice one ! [16:42:28] great glad to hear it