Files
scylladb/docs/operating-scylla/security/ldap-authentication.rst
Anna Stuchlik b2a718547f doc: remove Enterprise labels and directives
This PR removes the now redundant Enterprise labels and directives
from the ScyllDB documentation.

Fixes https://github.com/scylladb/scylladb/issues/22432

Closes scylladb/scylladb#22434
2025-01-27 16:01:48 +02:00

49 lines
1.3 KiB
ReStructuredText
Raw Permalink Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
===================
LDAP Authentication
===================
.. toctree::
:hidden:
saslauthd
Scylla supports user authentication via an LDAP server by leveraging the SaslauthdAuthenticator.
By configuring saslauthd correctly against your LDAP server, you enable Scylla to check the users credentials through it.
Configure saslauthd for LDAP
----------------------------
**Before You Begin**
This procedure requires you to install and configure saslauthd.
The general instructions are :doc:`here </operating-scylla/security/saslauthd>`.
#. Follow all of the steps in :doc:`this procedure </operating-scylla/security/saslauthd>` and use the code snippets below to list LDAP as the authentication mechanism.
#. You must list LDAP as saslauthds authentication mechanism:
.. tabs::
.. group-tab:: rpm-based distros
Edit ``/etc/sysconfig/saslauthd`` and add:
.. code-block:: none
MECH=ldap
.. group-tab:: deb-based distros
Edit ``/etc/default/saslauthd`` and add:
.. code-block:: none
MECHANISMS=ldap
#. You also have to edit the /etc/saslauthd.conf file to provide adequate `parameter <https://github.com/cyrusimap/cyrus-sasl/blob/cyrus-sasl-2.1.27/saslauthd/LDAP_SASLAUTHD#L74>`_ values for your LDAP server.