Skip to content

support LDAP authentication #6332

@luozenglin

Description

@luozenglin

Describe the solution you'd like

Access to a third-party LDAP service provides authentication login and group authorization services for Doris.

LDAP authentication login complements Doris authentication login by accessing the LDAP service for password authentication; Doris uses LDAP to authenticate the user's password first; if the user does not exist in the LDAP service, it continues to use Doris to authenticate the password; if the LDAP password is correct but there is no corresponding account in Doris, a temporary user is created to log in to Doris.

LDAP group authorization is to map the group in LDAP to the Role in Doris. If the user belongs to more than one user group in LDAP, the user will get the privileges of all groups corresponding to the Role after logging in to Doris, requiring the group name to be the same as the Role name.

See docs/zh-CN/administrator-guide/ldap.md for details.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions