You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: versioned_docs/version-4.x/admin-manual/auth/authentication/ldap.md
+9-3Lines changed: 9 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -49,17 +49,23 @@ In LDAP, data is organized in a tree structure. Here's an example of a typical L
49
49
```
50
50
ldap_authentication_enabled = true
51
51
ldap_host = ladp-host
52
-
ldap_port = 389 # change it if ldap_use_ssl specified to true as different port (636) is used for LDAPS
52
+
# change ldap_port value if ldap_use_ssl specified to true as different port (636) is used for LDAPS
53
+
ldap_port = 389
53
54
ldap_admin_name = uid=admin,o=emr
54
55
ldap_user_basedn = ou=people,o=emr
55
56
ldap_user_filter = (&(uid={login}))
56
57
ldap_group_basedn = ou=group,o=emr
57
-
ldap_use_ssl = true # specify true to switch to secured LDAPS protocol, specify false or comment property to use default behavior with plain LDAP
58
+
# specify ldap_use_ssl to true to switch to secured LDAPS protocol, specify false or comment property to use default behavior with plain LDAP
59
+
ldap_use_ssl = true
58
60
```
59
61
60
62
> Important for LDAPS:
63
+
>
61
64
> When `ldap_use_ssl = true`, ensure your LDAP server certificate is trusted by the Doris FE JVM.
62
-
> If using a custom or self-signed Certificate Authority (CA), you must configure the Java trustStore. Add the following parameters to JAVA_OPTS in `fe/conf/fe.conf` (adjust the path to your cacerts file):
65
+
>
66
+
> If using a custom or self-signed Certificate Authority (CA), you must configure the Java trustStore.
67
+
>
68
+
> Add the following parameters to JAVA_OPTS in `fe/conf/fe.conf` (adjust the path to your cacerts file):
0 commit comments