Enable LDAP Authentication for your Ops Manager Group¶
Ops Manager enables you to configure the Authentication Mechanisms that all clients, including the Ops Manager Agents, use to connect to your MongoDB deployments. You can enable multiple authentication mechanisms for each of your groups, but you must choose only one mechanism for the Agents.
MongoDB Enterprise supports proxying authentication requests to a Lightweight Directory Access Protocol (LDAP) service.
LDAP is only available on MongoDB Enterprise builds. If
you have existing deployments running on a MongoDB Community
build, you must upgrade them to MongoDB Enterprise before you can enable
LDAP for your Ops Manager group.
MongoDB Enterprise supports simple and SASL binding to Lightweight
Directory Access Protocol (LDAP) servers via
saslauthd and operating system
- MongoDB Enterprise for Linux can bind to an LDAP server either via
saslauthdor starting in MongoDB 3.4, via the operating system libraries.
- Starting in MongoDB version 3.4, MongoDB Enterprise for Windows can bind to an LDAP server via the operating system libraries.
This procedure describes how to configure and enable LDAP authentication when using Automation. If your Monitoring or Backup agents are not managed by Ops Manager, you must manually configure them to use LDAP. See: Configure Monitoring Agent for LDAP and Configure Backup Agent for LDAP Authentication for instructions.
If Ops Manager is not managing any MongoDB deployment, you can reset Authentication and SSL settings for your group.
To remove all authentication and security settings as well as the users and roles you created using Ops Manager, click Clear Settings in the Authentication & SSL Settings dialog box .
See Clear Security Settings for more information.
To unmanage MongoDB deployments, see Remove a Process from Management or Monitoring.
Select the appropriate type of LDAP authentication.
If you are using LDAP Authorization, you must select Native LDAP Authentication.
Configure LDAP (PLAIN) for the Agents.¶
You can enable more than one authentication mechanism for your MongoDB deployment, but the Ops Manager Agents can only use one authentication mechanism. Select LDAP (PLAIN) to connect to your MongoDB deployment.
Select LDAP (PLAIN) from the Agent Auth Mechanism drop-down menu.
For each Agent, provide:
Setting Value <Agent> LDAP Username Enter the LDAP username. <Agent> LDAP Password Enter the password for Agent’s LDAP Username. <Agent> LDAP Group DN
Enter the Distinguished Name for the Agent’s LDAP Group.
You only need to provide the Agent’s LDAP Group DN if you use LDAP Authorization.
Only configure the Agents you installed.
If you did not install the Backup Agent, do not configure the Backup agent.
Click Review & Deploy to review your changes.¶
Review and approve your changes.¶
Ops Manager displays your proposed changes.
- If you are satisfied, click Confirm & Deploy.
- Otherwise, click Cancel and you can make additional changes.