Active Directory Authentication - auth_ad_groups - The value.grp.roles field is required

Help
1

===========================================

Component Version
LibreNMS 25.5.0-12-g75050ff67 (2025-05-18T19:19:38+02:00)
DB Schema 2025_04_29_150423_context_nullable_in_ipv6_nd_table (338)
PHP 8.4.7
Python 3.11.2
Database MariaDB 10.11.11-MariaDB
RRDTool 1.7.2
SNMP 5.9.3
===========================================

[OK] Composer Version: 2.8.9
[OK] Dependencies up-to-date.
[OK] Database Connected
[OK] Database Schema is current
[OK] SQL Server meets minimum requirements
[OK] lower_case_table_names is enabled
[OK] MySQL engine is optimal
[OK] Database and column collations are correct
[OK] Database schema correct
[OK] MySQL and PHP time match
[OK] Active pollers found
[OK] Dispatcher Service is enabled
[OK] Locks are functional
[OK] No active python wrapper pollers found
[WARN] Using database for locking, you should set CACHE_STORE=redis
[OK] rrdtool version ok
[OK] Connected to rrdcached

Hi Folks,
any idea what I am doing wrong with Active Directory group authentication?
My DN: CN=grp.librenms.adm,OU=librenms,OU=Applications,DC=MyAdDomain,DC=net

sudo -u librenms lnms config:set auth_ad_groups.“grp.librenms.adm”.roles ‘[“admin”]’
The value.grp.roles field is required.

but this works
sudo -u librenms lnms config:set auth_ad_groups.“grp-librenms-adm”.roles ‘[“admin”]’

sudo -u librenms lnms config:get auth_ad_groups
{
“LibreNMS Admins”: {
“roles”: [
“admin”
]
},
“grp-librenms-adm”: {
“roles”: [
“admin”
]
}
}

No matter what I am doing, I can’t use “.” within the group name???

Thank you,
Wolfgang

2

Hmm, I bet the dots are giving it problems.
You could try setting it from the webui to see if that can escape them, but I am not sure it is currently possible.

3

Hi Murrant,
yes it’ about the dots and with the webui it’s working!

It’s creating that:

sudo -u librenms lnms config:get auth_ad_groups
{
“LibreNMS Admins”: {
“roles”: [
“admin”
]
},
“grp.librenms.adm”: {
“roles”: [
“admin”
]
},
“grp.librenms.ro”: {
“roles”: [
“global-read”
]
},
“grp.librenms.rw”: {
“roles”: [
“user”
]
}
}

4

. is kind of a special character in the librenms config when used in config paths.
because the group name is in the config path and not value it interprets it as a path separator.

I don’t think there is currently a way to work around this other than having a different group name without dots.