Describe the solution you'd like
Access to a third-party LDAP service provides authentication login and group authorization services for Doris.
LDAP authentication login complements Doris authentication login by accessing the LDAP service for password authentication; Doris uses LDAP to authenticate the user's password first; if the user does not exist in the LDAP service, it continues to use Doris to authenticate the password; if the LDAP password is correct but there is no corresponding account in Doris, a temporary user is created to log in to Doris.
LDAP group authorization is to map the group in LDAP to the Role in Doris. If the user belongs to more than one user group in LDAP, the user will get the privileges of all groups corresponding to the Role after logging in to Doris, requiring the group name to be the same as the Role name.
See docs/zh-CN/administrator-guide/ldap.md for details.
Describe the solution you'd like
Access to a third-party LDAP service provides authentication login and group authorization services for Doris.
LDAP authentication login complements Doris authentication login by accessing the LDAP service for password authentication; Doris uses LDAP to authenticate the user's password first; if the user does not exist in the LDAP service, it continues to use Doris to authenticate the password; if the LDAP password is correct but there is no corresponding account in Doris, a temporary user is created to log in to Doris.
LDAP group authorization is to map the group in LDAP to the Role in Doris. If the user belongs to more than one user group in LDAP, the user will get the privileges of all groups corresponding to the Role after logging in to Doris, requiring the group name to be the same as the Role name.
See docs/zh-CN/administrator-guide/ldap.md for details.