Is there a procedure on integrating wazuh with ldap?

Elastic Stack Elasticsearch
1

is there a procedure on integrating wazuh with ldap?

2

Hello Nour,

If you are running Wazuh with OpenDistro , you can follow this documentation page.

You will need a valid user with the necessary permissions to do the user search inside the LDAP users, and set those credentials inside /usr/share/elasticsearch/plugins/opendistro_security/securityconfig/config.yml

Then, you will need to execute the securityadmin script so the new settings take place:

cd /usr/share/elasticsearch/plugins/opendistro_security/tools
./securityadmin.sh -f ../securityconfig/config.yml -icl -nhnv -cert /etc/elasticsearch/kirk.pem -cacert /etc/elasticsearch/root-ca.pem -key /etc/elasticsearch/kirk-key.pem -t config

Reference: Apply Changes with securityadmin.sh - Open Distro Documentation

Once that is done, you should be able to login into Kibana with your LDAP users and assign permissions to them.
Hope this helps.