# Ldap authorization with percona mongodb **URL:** \ **Category:** Percona Server for MongoDB\ **Tags:** percona, mongodb\ **Created:** [August 16, 2021, 3:49am UTC](https://forums.percona.com/t/ldap-authorization-with-percona-mongodb/11786 "2021-08-16T03:49:34Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![khasimsoudagar](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/khasimsoudagar/32/3802_2.png) [@khasimsoudagar](https://forums.percona.com/u/khasimsoudagar)\ **Post date:** [August 16, 2021, 3:49am UTC](https://forums.percona.com/t/ldap-authorization-with-percona-mongodb/11786/1 "2021-08-16T03:49:34Z")
HI, I have used ldap authentication with percona mongodb. Now looking for ldap authorization with percona-mongodb. But in stack overflow i saw a comment like its not yet ready, under road map.([Percona MongoDB LDAP Auth - Stack Overflow](https://stackoverflow.com/questions/55030395/percona-mongodb-ldap-auth)) Can some one from percona mongodb team please confirm me, is ldap authorization with percona mongodb is in use or not, if yes please share suggested links here. Thank you. ---
**Author:** ![vadimtk](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/vadimtk/32/9528_2.png) [@vadimtk](https://forums.percona.com/u/vadimtk)\ **Post date:** [August 16, 2021, 2:55pm UTC](https://forums.percona.com/t/ldap-authorization-with-percona-mongodb/11786/2 "2021-08-16T14:55:36Z")
We support LDAP Authorization in Percona Server for MongoDB 4.4 [https://www.percona.com/doc/percona-server-for-mongodb/LATEST/authentication.html#ldap-authorization](https://www.percona.com/doc/percona-server-for-mongodb/LATEST/authentication.html#ldap-authorization) ---
**Author:** ![khasimsoudagar](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/khasimsoudagar/32/3802_2.png) [@khasimsoudagar](https://forums.percona.com/u/khasimsoudagar)\ **Post date:** [September 7, 2021, 3:15am UTC](https://forums.percona.com/t/ldap-authorization-with-percona-mongodb/11786/3 "2021-09-07T03:15:00Z")
HI @vadimtk , thanks for the response. In the link which you had shared , it is not clearly explained how to configure authorization with ldap. There mentioned like see also and added mongodb enterprise configuration link [[https://docs.mongodb.com/manual/core/security-ldap-external/](https://docs.mongodb.com/manual/core/security-ldap-external/)]. Should i follow the same mongo configuration for percona mongo conf also? can you please clarify me on this. I had tried to create same role names with ldap group DN’s but it did not work. ---
**Author:** ![khasimsoudagar](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/khasimsoudagar/32/3802_2.png) [@khasimsoudagar](https://forums.percona.com/u/khasimsoudagar)\ **Post date:** [September 8, 2021, 10:16am UTC](https://forums.percona.com/t/ldap-authorization-with-percona-mongodb/11786/4 "2021-09-08T10:16:24Z")
Hey hi @adamo.tonete , i saw your post on percona mongodb authentication. Here i would like to add authorization part, which comes with ldap groups/roles. I have been gone through many bolgs but no luck and even i had tried on my own still no luck. Can you please help me out here how can i manage authorization. ---
**Author:** ![khasimsoudagar](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/khasimsoudagar/32/3802_2.png) [@khasimsoudagar](https://forums.percona.com/u/khasimsoudagar)\ **Post date:** [October 6, 2021, 12:53pm UTC](https://forums.percona.com/t/ldap-authorization-with-percona-mongodb/11786/5 "2021-10-06T12:53:01Z")
can someone from percona team help me to configure authorization for mongodb with ldap. I have searched many blogs and site but still not able to find right solution on this. ---
**Author:** ![Ivan\_Groenewold](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/ivan_groenewold/32/6299_2.png) [@Ivan\_Groenewold](https://forums.percona.com/u/Ivan_Groenewold)\ **Post date:** [October 6, 2021, 1:12pm UTC](https://forums.percona.com/t/ldap-authorization-with-percona-mongodb/11786/6 "2021-10-06T13:12:17Z")
Hi Khasim, to configure authorization you will need to figure out the query to map your LDAP roles to MongoDB groups. See my blog here for a step by step guide: [Authenticate Percona Server for MongoDB Users via Native LDAP - Percona Database Performance Blog](https://www.percona.com/blog/2021/07/08/authenticate-percona-server-for-mongodb-users-via-native-ldap/) What is the specific issue you are having? ---
**Author:** ![khasimsoudagar](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/khasimsoudagar/32/3802_2.png) [@khasimsoudagar](https://forums.percona.com/u/khasimsoudagar)\ **Post date:** [October 9, 2021, 6:05pm UTC](https://forums.percona.com/t/ldap-authorization-with-percona-mongodb/11786/7 "2021-10-09T18:05:41Z")
Hi @Ivan_Groenewold , thanks for your response. I have configured sasl\_authd for ldap authentication and trying for only ldap authorization with mongod configuration. WIll this works or should i configure authentication conf also in the mongod conf file? Yeah you are right i might be missed at preparing correct query template. ---
**Author:** ![Ivan\_Groenewold](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/ivan_groenewold/32/6299_2.png) [@Ivan\_Groenewold](https://forums.percona.com/u/Ivan_Groenewold)\ **Post date:** [October 12, 2021, 2:27pm UTC](https://forums.percona.com/t/ldap-authorization-with-percona-mongodb/11786/8 "2021-10-12T14:27:18Z")
I suggest using the built-in auth mostly nowadays but it still should work ---
**Author:** ![khasimsoudagar](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/khasimsoudagar/32/3802_2.png) [@khasimsoudagar](https://forums.percona.com/u/khasimsoudagar)\ **Post date:** [October 13, 2021, 12:18pm UTC](https://forums.percona.com/t/ldap-authorization-with-percona-mongodb/11786/9 "2021-10-13T12:18:52Z")
HI @Ivan_Groenewold , thanks for your reply. I think here my **querytemplate** constrct is the issue. I have gone through your blog post [Percona Server for MongoDB LDAP Enhancements: User-to-DN Mapping - Percona Database Performance Blog](https://www.percona.com/blog/2020/04/24/percona-server-for-mongodb-ldap-enhancements-user-to-dn-mapping/) Here you had explained about **userToDNMapping** very well. And at last you mentioned **" Stay tuned for more info on new PSMDB features such as LDAP authorization ( `security.ldap.authz.queryTemplate` config option) and others."** Is that queryTemplate blog also got released? if yes can you please share its link here. ---
**Author:** ![Ivan\_Groenewold](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/ivan_groenewold/32/6299_2.png) [@Ivan\_Groenewold](https://forums.percona.com/u/Ivan_Groenewold)\ **Post date:** [October 13, 2021, 12:29pm UTC](https://forums.percona.com/t/ldap-authorization-with-percona-mongodb/11786/10 "2021-10-13T12:29:05Z")
I think that is just a generic sentence that is added to all MongoDB blogs. To test your query template you can download mongoldap tool. It also works with Percona distribution.