[CASSANDRA-12294] LDAP Authentication

• Type: New Feature
• Status: In Progress
• Priority: Low
• Resolution: Unresolved
• Fix Version/s: 5.x
• Component/s: Feature/Authorization
• Labels: security
• Assignee: Kurt Greaves
• Reporter: Daniel Kleviansky

Authors

Kurt Greaves

• Created: 26/Jul/16 04:53
• Updated: 07/Mar/23 10:53

Description

Addition of an LDAP authentication plugin, in tree, along side the default authenticator, so that Cassandra can leverage existing LDAP-speaking servers to manage user logins.
DSE offers this: Enabling LDAP authentication , but does not exist in vanilla C* as far as I can tell.

Ideally would like to introduce this as part of the 2.2.x branch, as this is what is currently running in client production environment, and where it is needed at the moment.
Would aim for support of at least Microsoft Active Directory running on Windows Server 2012.

Work in progress: https://github.com/lqid/cassandra — Branch 12294-22