# Is there a procedure on integrating wazuh with ldap?

**URL:** <https://discuss.elastic.co/t/is-there-a-procedure-on-integrating-wazuh-with-ldap/289632>\
**Category:** Elasticsearch\
**Created:** [November 18, 2021, 6:50pm UTC](https://discuss.elastic.co/t/is-there-a-procedure-on-integrating-wazuh-with-ldap/289632 "2021-11-18T18:50:15Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![nour.megahed](https://avatars.discourse-cdn.com/v4/letter/n/22d042/32.png) [@nour.megahed](https://discuss.elastic.co/u/nour.megahed)\
**Post date:** [November 18, 2021, 6:50pm UTC](https://discuss.elastic.co/t/is-there-a-procedure-on-integrating-wazuh-with-ldap/289632/1 "2021-11-18T18:50:15Z")

</div>

is there a procedure on integrating wazuh with ldap?

---

<div class="post-metadata">

**Author:** ![danisan](https://avatars.discourse-cdn.com/v4/letter/d/6f9a4e/32.png) [@danisan](https://discuss.elastic.co/u/danisan)\
**Post date:** [November 26, 2021, 6:22pm UTC](https://discuss.elastic.co/t/is-there-a-procedure-on-integrating-wazuh-with-ldap/289632/2 "2021-11-26T18:22:23Z")

</div>

Hello Nour,

If you are running Wazuh with OpenDistro , you can follow [this documentation page](https://opendistro.github.io/for-elasticsearch-docs/docs/security/configuration/ldap/#connection-settings).

You will need a valid user with the necessary permissions to do the **user search** inside the LDAP users, and set those credentials inside _/usr/share/elasticsearch/plugins/opendistro\_security/securityconfig/config.yml_

Then, you will need to execute the _ **securityadmin** _ script so the new settings take place:

> cd /usr/share/elasticsearch/plugins/opendistro\_security/tools  
> ./securityadmin.sh -f ../securityconfig/config.yml -icl -nhnv -cert /etc/elasticsearch/kirk.pem -cacert /etc/elasticsearch/root-ca.pem -key /etc/elasticsearch/kirk-key.pem -t config

**Reference:** [Apply Changes with securityadmin.sh - Open Distro Documentation](https://opendistro.github.io/for-elasticsearch-docs/docs/security/configuration/security-admin/#sample-commands)

Once that is done, you should be able to login into Kibana with your LDAP users and assign permissions to them.  
Hope this helps.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 24, 2021, 6:23pm UTC](https://discuss.elastic.co/t/is-there-a-procedure-on-integrating-wazuh-with-ldap/289632/3 "2021-12-24T18:23:05Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
