Enterprise Authentication for Percona Server for MongoDB - LDAP and Kerberos
summary
Percona Server for MongoDB adds external auth using saslauthd proxy, native LDAP binding, and Kerberos keytab methods: the demo configures saslauthd, shows native LDAP options (servers, TLS, bind DN, user->DN mapping and group->role query) which removes the extra daemon, and sets up GSSAPI with keytab and KDC tickets. $external users and mapped MongoDB roles are created so LDAP groups merge permissions, authentication succeeds, and permission checks (reads allowed, drops blocked) behave as expected.
AI-written summary · about
chapters (8)
- 0:00Start
- 0:18Percona Server for MongoDB
- 1:07Why is access control important?
- 1:42Authentication in MongoDB
- 2:52What's the benefit of federated (centralized) authentication?
- 4:06LDAP Proxy Authentication
- 5:46Native LDAP authentication/ authorization
- 7:30Kerberos authentication
related talks
53mExternal Authentication 101 With Percona Server for MySQL, MongoDB and PostgreSQL and PMM
04mRoad to Percona Live 2022 - Jaime Sicam
25mPercona Server for MongoDB: Features Overview
09mOpen Software for MongoDB Where Percona Fits
15mMongoDB Security: Making Things Secure by Default
27mDIY DBaaS with Percona Kubernetes Operators
35mExternal authentication for Django projects
33mKey Management for Data-at-Rest Encryption in Percona Server for MongoDB