Skip to content
Studio 3T - The professional GUI, IDE and client for MongoDB
  • Tools
    • Aggregation Editor
    • IntelliShell
    • Visual Query Builder
    • Export Wizard
    • Import Wizard
    • Query Code
    • SQL Query
    • Connect
    • Schema Explorer
    • Compare
    • SQL ⇔ MongoDB Migration
    • Data Masking
    • Task Scheduler
    • Reschema
    • AI Helper
    • Team Sharing
    • Index Manager
    • More Tools and Features
  • Solutions
  • Resources
    • Knowledge Base
    • MongoDB Tutorials & Courses
    • Tool/Feature Documentation
    • Blog
    • Community
    • Testimonials
    • Whitepapers
    • Reports
  • Contact us
    • Contact
    • Sales Support
    • Feedback and Support
    • Careers
    • About Us
  • Store
    • Buy Now
    • Preferred Resellers
    • Team Pricing
  • Download
  • My 3T
search

Studio 3T® Knowledge Base

  • Documentation
  • Tutorials
  • Workshops
Take the fastest route to learning MongoDB. Cover the basics in two hours with MongoDB 101, no registration required.
Start the free course

MongoDB Enterprise Authentication Methods: LDAP and Kerberos

Posted on: 24/07/2018 (last updated: 14/10/2021) by Kathryn Vargas

If you have a MongoDB Enterprise license, you can take advantage of two authentication methods supported by the MongoDB Enterprise server: LDAP and Kerberos.

They’re quite different from one another, so here’s a short overview to help determine which authentication method might better suit your MongoDB enterprise needs and setup resources.

What is LDAP?

Short for Lightweight Directory Access Protocol, LDAP is a protocol used to access directory servers.

If you’re using databases (like MongoDB) which support the protocol, think of LDAP as the layer that sits on top of them, enabling you to centrally authorize and authenticate users by running LDAP-specific queries. No complex cryptography, just straightforward lookups.

LDAP authentication in MongoDB

As of Version 3.4, MongoDB Enterprise Server supports LDAP authorization. MongoDB has prepared quite a thorough documentation on MongoDB LDAP authentication, but be warned: the LDAP topic is quite broad that even the documentation assumes those tasked with the setup are already familiar with the protocol.

What is Kerberos?

Unlike LDAP which checks for key-value pairs like username-password to authenticate users, Kerberos uses strong key cryptography.

Each client or local machine lives within a “realm” – think of it as the scope of assets or services it’s allowed to access – and holds a secret key which serves as proof of identity whenever it sends a request to what’s called the Key Distribution Center or KDC. The authentication server within the KDC takes this secret key to request an access-granting “ticket” from the ticket-granting server, also within the KDC. The ticket is granted only after a series of successful mutual authentication between the client and the KDC, which then gives the user access to the requested service.

Kerberos authentication in MongoDB

MongoDB Enterprise has supported Kerberos authentication since Version 2.4. You can find the full list of compatible MongoDB drivers and the complete documentation for various configuration scenarios (e.g. Linux, Windows) here.

Certified for MongoDB Enterprise

Studio 3T is a certified MongoDB Enterprise partner. Our Ultimate edition fully integrates with MongoDB Enterprise and makes it easy to deploy both LDAP and Kerberos authentication across your company – and a whole lot more.

Whether it's LDAP or Kerberos you need, Studio 3T Enterprise supports both and makes the deployment process super-easy

Built especially for professional teams, Studio 3T Ultimate edition unlocks a full suite of advanced features like polyglot query code generation, the ability to use SQL to query MongoDB, and seamless import/export between MongoDB and SQL, that’s sure to save your team time and effort.

Get your Studio 3T Ultimate license today to enable LDAP and Kerberos authentication.


How helpful was this article?
This article was hideous
This article was bad
This article was ok
This article was good
This article was great
Thank you for your feedback!

About The Author

Kathryn Vargas

When she's not writing about working with MongoDB, Kathryn spends her free time exploring Berlin's food scene, playing the drums, learning languages (current mission: German), and hiking.

Article navigation

Related articles

  • What’s New in Studio 3T 2022.1 – SQL Connection Import/Export, MongoDB-AWS authentication
  • SQL Migration: MongoDB and SQL, Coexistence Made Easy
  • Test your skills: Importing and Exporting MongoDB Data
  • Test your skills: Introduction to MongoDB and Studio 3T
  • Smart and Safe MongoDB Multi-Document Updates #Studio3T_AMA

Studio 3T

MongoDB Enterprise Certified Technology PartnerSince 2014, 3T has been helping thousands of MongoDB developers and administrators with their everyday jobs by providing the finest MongoDB tools on the market. We guarantee the best compatibility with current and legacy releases of MongoDB, continue to deliver new features with every new software release, and provide high quality support.

Find us on FacebookFind us on TwitterFind us on YouTubeFind us on LinkedIn

Education

  • Free MongoDB Tutorials
  • Connect to MongoDB
  • Connect to MongoDB Atlas
  • Import Data to MongoDB
  • Export MongoDB Data
  • Build Aggregation Queries
  • Query MongoDB with SQL
  • Migrate from SQL to MongoDB

Resources

  • Feedback and Support
  • Sales Support
  • Knowledge Base
  • FAQ
  • Reports
  • White Papers
  • Testimonials
  • Discounts

Company

  • About Us
  • Blog
  • Careers
  • Legal
  • Press
  • Privacy Policy
  • EULA

© 2023 3T Software Labs Ltd. All rights reserved.

  • Privacy Policy
  • Cookie settings
  • Impressum

We value your privacy

With your consent, we and third-party providers use cookies and similar technologies on our website to analyse your use of our site for market research or advertising purposes ("analytics and marketing") and to provide you with additional functions (“functional”). This may result in the creation of pseudonymous usage profiles and the transfer of personal data to third countries, including the USA, which may have no adequate level of protection for the processing of personal data.

By clicking “Accept all”, you consent to the storage of cookies and the processing of personal data for these purposes, including any transfers to third countries. By clicking on “Decline all”, you do not give your consent and we will only store cookies that are necessary for our website. You can customize the cookies we store on your device or change your selection at any time - thus also revoking your consent with effect for the future - under “Manage Cookies”, or “Cookie Settings” at the bottom of the page. You can find further information in our Privacy Policy.
Accept all
Decline all
Manage cookies
✕

Privacy Preference Center

With your consent, we and third-party providers use cookies and similar technologies on our website to analyse your use of our site for market research or advertising purposes ("analytics and marketing") and to provide you with additional functions (“functional”). This may result in the creation of pseudonymous usage profiles and the transfer of personal data to third countries, including the USA, which may have no adequate level of protection for the processing of personal data. Please choose for which purposes you wish to give us your consent and store your preferences by clicking on “Accept selected”. You can find further information in our Privacy Policy.

Accept all cookies

Manage consent preferences

Essential cookies are strictly necessary to provide an online service such as our website or a service on our website which you have requested. The website or service will not work without them.

Performance cookies allow us to collect information such as number of visits and sources of traffic. This information is used in aggregate form to help us understand how our websites are being used, allowing us to improve both our website’s performance and your experience.

Google Analytics

Google Ads

Bing Ads

Facebook

LinkedIn

Quora

Hotjar

Reddit

Functional cookies collect information about your preferences and choices and make using the website a lot easier and more relevant. Without these cookies, some of the site functionality may not work as intended.

HubSpot

Social media cookies are cookies used to share user behaviour information with a third-party social media platform. They may consequently effect how social media sites present you with information in the future.

Accept selected
✕