v.21.4New Features

Added Kerberos Authentication Support for Preconfigured Users and HTTP Requests

Added support of Kerberos authentication for preconfigured users and HTTP requests (GSS-SPNEGO). #14995 (Denis Glazachev).
Added support for Kerberos authentication for preconfigured users and HTTP requests using GSS-SPNEGO.

Why it matters

This feature enables secure and standardized authentication via Kerberos, allowing ClickHouse to integrate seamlessly within environments that use Kerberos for identity verification. It solves the problem of needing a robust, enterprise-grade authentication method for HTTP requests and preconfigured users, enhancing security and interoperability.

How to use it

To use Kerberos authentication, configure Kerberos credentials for the desired preconfigured users in the ClickHouse user configuration. For HTTP requests, ensure the client supports GSS-SPNEGO and that the server is properly set up with Kerberos keytabs and realm configuration.