[enhancement](ldap) optimize LDAP authentication. (#11948)

* [enhancement](ldap) optimize LDAP authentication.

1. Support caching LDAP user information.
2. HTTP authentication supports LDAP.
3. LDAP temporary users support default user property.
4. LDAP configuration supports the `admin show config` and `admin set config` commands.
This commit is contained in:
luozenglin
2022-08-24 17:08:14 +08:00
committed by GitHub
parent d87ab69ead
commit b619bb2000
21 changed files with 593 additions and 242 deletions

View File

@ -171,5 +171,3 @@ If jack also belongs to the LDAP groups doris_qa, doris_pm; Doris exists roles:
## Limitations of LDAP authentication
* The current LDAP feature of Doris only supports plaintext password authentication, that is, when a user logs in, the password is transmitted in plaintext between client and fe and between fe and LDAP service.
* The current LDAP authentication only supports password authentication under mysql protocol. If you use the Http interface, you cannot use LDAP users for authentication.
* Temporary users do not have user properties.