v.20.11New Feature

Added LDAP Support for Non-Existent Local Users

Added support of LDAP as a user directory for locally non-existent users. #12736 (Denis Glazachev).
Added support for LDAP authentication to allow user logins for users not existing locally in ClickHouse.

Why it matters

This feature enables ClickHouse to authenticate users against an external LDAP directory when the user does not exist locally. It simplifies user management by delegating authentication to a centralized LDAP service, enhancing security and administrative convenience.

How to use it

To use this feature, configure the ClickHouse user directory settings to enable LDAP authentication. Users not found locally will be authenticated via the specified LDAP server. Detailed configuration requires specifying LDAP server parameters and mapping user credentials accordingly.