Directory Provider Configuration Reference

The Trino configuration structure remains the same whether you use OpenLDAP, Active Directory, or another LDAP-compatible directory provider.

However, directory-specific settings, such as the user bind pattern and group membership attribute, can differ.

Configuration

OpenLDAP

Active Directory

Other LDAP-Compatible Providers

Bind pattern

uid=${USER},ou=users,dc=...

Typically ${USER}@domain.com or a directory DN

Depends on the directory schema

Group member attribute

memberUid with posixGroup

member with group

Depends on the directory schema

Transport

LDAP or LDAPS

LDAPS recommended

LDAPS recommended

Service account

Local bind DN

Dedicated service or machine account

Provider-specific service credential


When changing directory providers, update the following values as required:

  • Directory connection details

  • User bind pattern

  • Group search configuration

  • Group membership attribute

  • Service account credentials

The overall structure of password-authenticator.properties, group-provider.properties, and resource-groups.json remains unchanged.

  Last updated