Skip to main content

LDAP

  • November 16, 2015
  • 1 reply
  • 8 views
abhishek_1
Forum|alt.badge.img+1

Hi All,

 

I have a few questions on LDAP configuration.

 

Can we configure LDAP on a per user basis?

For example:
UserX of CompanyX can authenticate w/ their own Active Directory Services (via LDAPS)
UserY of CompanyY can authenticate w/ their own LDAP service (via LDAPS)
So we don’t need to have dedicated Vertica databases per company wanting LDAP authentication? Rather we can share the same server instance (but have different schemas). Is this correct?

 

Thanks in advance !!

 

 

    1 reply

    skeswani
    Forum|alt.badge.img
    • skeswani
    • Participating Frequently
    • November 17, 2015

    yes, its possible to do that.

     

    create two auth methods as show and assign/grant users as needed

     

     

    CREATE AUTHENTICATION LDAP2 METHOD 'ldap' HOST '0.0.0.0/0';
    ALTER AUTHENTICATION Ldap2 SET host='ldap://evilbill.verticacorp.com' , domain_prefix='verticacorp', basedn='OU=Vertica Users,dc=verticacorp,dc=com' 
    ALTER AUTHENTICATION Ldap2 enable;
    GRANT AUTHENTICATION LDAP2 to "jbond";


    CREATE AUTHENTICATION LDAP1 METHOD 'ldap' HOST '0.0.0.0/0';
    ALTER AUTHENTICATION Ldap1 SET host='ldap://evilbill.bank.com' , domain_prefix='bank', basedn='OU=Vertica Users,dc=bank,dc=com' 
    ALTER AUTHENTICATION Ldap1 enable;
    GRANT AUTHENTICATION LDAP1 to "mpenny";

    Still scrolling?
    Ask a question
    Terms & ConditionsAccessibility statement