LDAP and SCRAM-SHA

Hi guys!

Can I set LDAP and SCRAM-SHA authentication in a sharded cluster?

I can’t find specific docs to implement something like this.

Thanks.

Hi @Oscar_Cervantes,

All auth methods are supported for standalone, replica set, and sharded clusters. Note: LDAP support requires MongoDB Enterprise.

Per LDAP Authorization - Sharded Clusters:

In sharded clusters, you must configure LDAP authorization on the config servers for cluster-level users. You can optionally configure LDAP authorization on each shard for shard-local users.

If you want to support multiple authenticationMechanisms you can provide a comma-delimited list in your mongos/mongod config. You can only set this parameter during start-up.

For example:

setParameter:
    authenticationMechanisms: PLAIN,SCRAM-SHA-256

Regards,
Stennie

This topic was automatically closed 5 days after the last reply. New replies are no longer allowed.