{"id":7376,"date":"2019-08-08T10:00:16","date_gmt":"2019-08-08T17:00:16","guid":{"rendered":"http:\/\/www.couchbase.com\/blog\/?p=7376"},"modified":"2025-06-13T19:26:17","modified_gmt":"2025-06-14T02:26:17","slug":"managing-ldap-groups-for-external-users-in-6-5","status":"publish","type":"post","link":"https:\/\/www.couchbase.com\/blog\/managing-ldap-groups-for-external-users-in-6-5\/","title":{"rendered":"Managing LDAP groups for external users in 6.5"},"content":{"rendered":"<p><span style=\"font-weight: 400;\">In the last <a href=\"https:\/\/www.couchbase.com\/blog\/managing-couchbase-users-via-groups-in-6-5\/\">blog<\/a><\/span><span style=\"font-weight: 400;\">, we described a new feature in Couchbase Server 6.5 called Couchbase groups. In this blog, we will discuss about the new LDAP group capability in Couchbase Server 6.5, along with easy to follow steps to get you started. With the LDAP integration in Couchbase Server, you can leverage your existing organizational structure for managing group-based privileges via RBAC roles. <\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">The particulars of installing, running and configuring the LDAP servers falls outside the scope of this blog; however, to demonstrate a working example, we will use the online LDAP test server (called <\/span><a href=\"https:\/\/www.forumsys.com\/tutorials\/integration-how-to\/ldap\/online-ldap-test-server\/\"><span style=\"font-weight: 400;\">ldap.forumsys.com<\/span><\/a><span style=\"font-weight: 400;\">) in our configurations.<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">First, What is LDAP and LDAP groups?<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">If you\u2019re a system administrator, you probably already know what LDAP stands for, but for those not familiar with LDAP, it means Lightweight Directory Access Protocol, and it manages a hierarchical organization of <\/span><b>Users<\/b><span style=\"font-weight: 400;\">, <\/span><b>Groups<\/b><span style=\"font-weight: 400;\">, and <\/span><b>Organisational Units<\/b><span style=\"font-weight: 400;\">. In the LDAP directory, every object has its own unique path &#8211; called a <\/span><b>Distinguished Name<\/b><span style=\"font-weight: 400;\">, or <\/span><b>DN<\/b><span style=\"font-weight: 400;\">. For example, we might have the following DNs for a user and a group respectively &#8211; <\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>cn=Perry,ou=Users,dc=example,dc=com <\/b><b><br \/>\n<\/b><b>ou=chemists,dc=example,dc=com<\/b><b><br \/>\n<\/b><b><br \/>\n<\/b><span style=\"font-weight: 400;\">LDAP groups are used to group LDAP users together in order to simplify management and maintenance of security outside Couchbase. Typically, a user in Couchbase can take several actions on resources based on the RBAC privileges assigned to the user. For example, an employee might need SELECT access on all buckets. Without LDAP group support, user onboarding involved creating user accounts (domain=external) for every employee, and individually assigning them the SELECT privilege on bucket[\u2018*\u2019]. <\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">With Couchbase 6.5, LDAP groups can be created to bundle users that have similar job roles together in the external LDAP server, and these external LDAP groups can be mapped in Couchbase Server to Couchbase group. Furthermore, privileges via RBAC roles can be associated, and inherited by users who are members of the group. <\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">For example, as shown in the image below, users belonging to Group=workers in the LDAP server, and inside Couchbase Server, the external LDAP workers group is mapped to the employees group. Couchbase roles 1 and 3, are then assigned to the employees group.<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-7423\" src=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/2019\/08\/ldap0-300x187.png\" alt=\"\" width=\"574\" height=\"358\" srcset=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/ldap0-300x187.png 300w, https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/ldap0-20x12.png 20w, https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/ldap0.png 512w\" sizes=\"auto, (max-width: 574px) 100vw, 574px\" \/><\/p>\n<p><span style=\"font-weight: 400;\">Figure : Fixed roles in Couchbase can be assigned to individual users or groups<\/span><\/p>\n<p><span style=\"font-weight: 400;\">LDAP queries and configuration<\/span><\/p>\n<p><span style=\"font-weight: 400;\">An LDAP query is a command that asks the LDAP directory service for information. For example, if you\u2019d like to see which groups a particular user is a part of, your query is &#8211;<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Base: <\/b><span style=\"font-weight: 400;\">dc=example,dc=com<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Filter : <\/b><span style=\"font-weight: 400;\">(&amp;(objectclass=groupOfUniqueNames)(uniquemember=uid=%u,dc=example,dc=com))<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">Additionally, for the other LDAP fields, you can use the values as shown below &#8211;\u00a0<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-7424\" src=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/2019\/08\/LDAP-configuration-300x242.png\" alt=\"\" width=\"487\" height=\"393\" srcset=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/LDAP-configuration-300x242.png 300w, https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/LDAP-configuration-20x16.png 20w, https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/LDAP-configuration.png 768w\" sizes=\"auto, (max-width: 487px) 100vw, 487px\" \/><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-7426\" src=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/2019\/08\/LDAP-config2-300x244.png\" alt=\"\" width=\"478\" height=\"389\" srcset=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/LDAP-config2-300x244.png 300w, https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/LDAP-config2-20x16.png 20w, https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/LDAP-config2.png 512w\" sizes=\"auto, (max-width: 478px) 100vw, 478px\" \/><\/p>\n<table style=\"height: 25px;\" width=\"659\">\n<tbody>\n<tr>\n<td><\/td>\n<td>For more details on connection settings, check <a style=\"font-size: 19px;\" href=\"https:\/\/www.forumsys.com\/tutorials\/integration-how-to\/ldap\/online-ldap-test-server\/\">here<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><strong>Users and groups in Couchbase <\/strong><\/p>\n<p><span style=\"font-weight: 400;\">In the admin UI of Couchbase, you can now toggle between user and group view in the security tab. You must be either a full administrator, or a security administrator to be able to access the security tab.\u00a0\u00a0<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-7429\" src=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/2019\/08\/Screen-Shot-2019-08-07-at-6.44.03-PM-300x77.png\" alt=\"\" width=\"795\" height=\"204\" srcset=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/Screen-Shot-2019-08-07-at-6.44.03-PM-300x77.png 300w, https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/Screen-Shot-2019-08-07-at-6.44.03-PM-1024x262.png 1024w, https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/Screen-Shot-2019-08-07-at-6.44.03-PM-768x196.png 768w, https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/Screen-Shot-2019-08-07-at-6.44.03-PM-1536x392.png 1536w, https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/Screen-Shot-2019-08-07-at-6.44.03-PM-20x5.png 20w, https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/Screen-Shot-2019-08-07-at-6.44.03-PM-1320x337.png 1320w, https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/Screen-Shot-2019-08-07-at-6.44.03-PM.png 2048w\" sizes=\"auto, (max-width: 795px) 100vw, 795px\" \/> \u00a0<span style=\"font-weight: 400;\"><br \/>\n<\/span> <span style=\"font-weight: 400;\"><br \/>\n<\/span><strong>Creating a group and mapping it to LDAP group<\/strong><\/p>\n<p><span style=\"font-weight: 400;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-7428\" src=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/2019\/08\/LDAP-300x269.png\" alt=\"\" width=\"509\" height=\"456\" srcset=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/LDAP-300x269.png 300w, https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/LDAP-20x18.png 20w, https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/LDAP.png 512w\" sizes=\"auto, (max-width: 509px) 100vw, 509px\" \/><\/span><\/p>\n<p><span style=\"font-weight: 400;\">Creating a group and assigning roles to it is easy. By simply clicking \u2018Add Group\u2019 in the top right corner of the UI, and picking a group name along with the roles to be associated with the group, you can create a group. If you\u2019re working with an external LDAP server in this case, don\u2019t forget to map this group to the LDAP group.<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The map shown in red expects a path to the LDAP group node. For example, if we want to map this to the scientists group in our LDAP server, the map expression would be &#8211;<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>ou=dev,ab=test<\/b><\/p>\n<p><b><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-7430\" src=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/2019\/08\/Screen-Shot-2019-08-07-at-6.55.01-PM-300x72.png\" alt=\"\" width=\"767\" height=\"184\" srcset=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/Screen-Shot-2019-08-07-at-6.55.01-PM-300x72.png 300w, https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/Screen-Shot-2019-08-07-at-6.55.01-PM-1024x247.png 1024w, https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/Screen-Shot-2019-08-07-at-6.55.01-PM-768x185.png 768w, https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/Screen-Shot-2019-08-07-at-6.55.01-PM-1536x370.png 1536w, https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/Screen-Shot-2019-08-07-at-6.55.01-PM-20x5.png 20w, https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/Screen-Shot-2019-08-07-at-6.55.01-PM-1320x318.png 1320w, https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/Screen-Shot-2019-08-07-at-6.55.01-PM.png 2048w\" sizes=\"auto, (max-width: 767px) 100vw, 767px\" \/><\/b><b><\/b><\/p>\n<p><span style=\"font-weight: 400;\">Note that the external mapping for the group refers to an LDAP node path (i.e LDAP group chemists mapped to Couchbase group Employee; LDAP group scientists mapped to Couchbase group Executives, and LDAP group mathematicians mapped to Couchbase group Manager).<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">Summarizing Group-Role mapping<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">Here is a quick summary of the different groups and role mappings based on our setup so far &#8211; <\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-7431\" src=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/2019\/08\/LDAP-3-300x102.png\" alt=\"\" width=\"588\" height=\"200\" srcset=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/LDAP-3-300x102.png 300w, https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/LDAP-3-20x7.png 20w, https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/LDAP-3.png 512w\" sizes=\"auto, (max-width: 588px) 100vw, 588px\" \/><\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>This means that &#8211; <\/b><b><br \/>\n<\/b><span style=\"font-weight: 400;\">1. The Executive is effectively full admin and has all the privileges of Couchbase. <\/span><b>This group is mapped to the scientists LDAP group.<\/b><\/p>\n<p><span style=\"font-weight: 400;\">2. The Manager has full read-write access on the buckets, as well as cluster and\u00a0 bucket admin privileges. He\/she does not have access to security settings. <\/span><b>This group is mapped to the mathematicians LDAP group.<\/b><\/p>\n<ol start=\"3\">\n<li><span style=\"font-weight: 400;\"> The employee should be able to only issue N1QL SELECT statements for any bucket, and manage indexes. <\/span><b>This group is mapped to the chemists LDAP group.<\/b><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">As \u2018Tesla\u2019 : the Executive Scientist<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">Notice that the user logged in is \u2018tesla\u2019, which is shown in the top right.<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-7432\" src=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/2019\/08\/LDAP-euclid-300x142.png\" alt=\"\" width=\"609\" height=\"288\" srcset=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/LDAP-euclid-300x142.png 300w, https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/LDAP-euclid-20x9.png 20w, https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/LDAP-euclid.png 512w\" sizes=\"auto, (max-width: 609px) 100vw, 609px\" \/><\/p>\n<p><b>Notice that Tesla is Full admin on the Couchbase cluster<\/b><\/p>\n<p><span style=\"font-weight: 400;\">As \u2018Euclid\u2019 : the Manager Mathematician<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">The user logged in is \u2018euclid\u2019, which is shown in the top right.<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-7441\" src=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/2019\/08\/LDAP-euclid-1-300x142.png\" alt=\"\" width=\"596\" height=\"282\" srcset=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/LDAP-euclid-1-300x142.png 300w, https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/LDAP-euclid-1-20x9.png 20w, https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/LDAP-euclid-1.png 512w\" sizes=\"auto, (max-width: 596px) 100vw, 596px\" \/><\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Notice that Euclid cannot change security settings, and the \u2018security\u2019 option is not shown in the left menu.<\/b><\/p>\n<p><span style=\"font-weight: 400;\">As \u2018Curie\u2019 : the Employee Chemist<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">The user logged in is \u2018curie\u2019, which is shown in the top right.<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-7440\" src=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/2019\/08\/LDAP-curie-300x143.png\" alt=\"\" width=\"650\" height=\"310\" srcset=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/LDAP-curie-300x143.png 300w, https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/LDAP-curie-1024x487.png 1024w, https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/LDAP-curie-768x365.png 768w, https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/LDAP-curie-1536x731.png 1536w, https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/LDAP-curie-20x10.png 20w, https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/LDAP-curie-1320x628.png 1320w, https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/LDAP-curie.png 1600w\" sizes=\"auto, (max-width: 650px) 100vw, 650px\" \/><\/p>\n<p><span style=\"font-weight: 400;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-7442\" src=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/2019\/08\/curie-2-300x97.png\" alt=\"\" width=\"656\" height=\"212\" srcset=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/curie-2-300x97.png 300w, https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/curie-2-20x6.png 20w, https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/curie-2.png 512w\" sizes=\"auto, (max-width: 656px) 100vw, 656px\" \/><\/span><\/p>\n<p><b>Notice that Curie can issue select statements but not insert statements.<\/b><\/p>\n<p><strong>Conclusion<\/strong><\/p>\n<p><span style=\"font-weight: 400;\">LDAP group support is an exciting new feature in Couchbase Server 6.5. We hope you enjoyed this blog, and as always, we look forward to your feedback. Do take Couchbase Server for a spin and checkout all the new cool features.<\/span><\/p>\n<p><b>Resources<\/b><\/p>\n<p><i>Download<\/i><\/p>\n<p><a href=\"https:\/\/couchbase.com\/downloads?family=server&amp;product=couchbase-server-developer\" target=\"_blank\" rel=\"noopener noreferrer\" data-auth=\"NotApplicable\">Download Couchbase Server 6.5<\/a><\/p>\n<p><i>\u00a0<\/i><i>Documentation<\/i><\/p>\n<p><a href=\"https:\/\/docs.couchbase.com\/server\/6.5\/release-notes\/relnotes.html\" target=\"_blank\" rel=\"noopener noreferrer\" data-auth=\"NotApplicable\">Couchbase Server 6.5 Release Notes<\/a><\/p>\n<p><a href=\"https:\/\/docs.couchbase.com\/server\/6.5\/introduction\/whats-new.html\" target=\"_blank\" rel=\"noopener noreferrer\" data-auth=\"NotApplicable\">Couchbase Server 6.5 What\u2019s New<\/a><\/p>\n<p><i>Blogs<\/i><\/p>\n<p><a href=\"https:\/\/www.couchbase.com\/blog\/announcing-couchbase-server-6-5-0-whats-new-and-improved\/\" target=\"_blank\" rel=\"noopener noreferrer\" data-auth=\"NotApplicable\">Blog: Announcing Couchbase Server 6.5 \u2013 What\u2019s New and Improved<\/a><\/p>\n<p><a href=\"https:\/\/www.couchbase.com\/blog\/couchbase-brings-distributed-multi-document-acid-transactions-to-nosql\/\" target=\"_blank\" rel=\"noopener noreferrer\" data-auth=\"NotApplicable\">Blog: Couchbase brings Distributed Multi-document ACID Transactions to NoSQL<\/a><\/p>\n<p><b><a href=\"https:\/\/www.couchbase.com\/blog\/tag\/6-5\/\" target=\"_blank\" rel=\"noopener noreferrer\" data-auth=\"NotApplicable\">All 6.5 Blogs<\/a><\/b><\/p>\n","protected":false},"excerpt":{"rendered":"<p>In the last blog, we described a new feature in Couchbase Server 6.5 called Couchbase groups. In this blog, we will discuss about the new LDAP group capability in Couchbase Server 6.5, along with easy to follow steps to get [&hellip;]<\/p>\n","protected":false},"author":6588,"featured_media":7448,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[1815,1816,1813],"tags":[2378],"ppma_author":[9064],"class_list":["post-7376","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-best-practices-and-tutorials","category-couchbase-server","category-security","tag-6-5"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.3 (Yoast SEO v27.3) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Managing LDAP groups for external users in 6.5 - The Couchbase Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.couchbase.com\/blog\/managing-ldap-groups-for-external-users-in-6-5\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Managing LDAP groups for external users in 6.5\" \/>\n<meta property=\"og:description\" content=\"In the last blog, we described a new feature in Couchbase Server 6.5 called Couchbase groups. In this blog, we will discuss about the new LDAP group capability in Couchbase Server 6.5, along with easy to follow steps to get [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.couchbase.com\/blog\/managing-ldap-groups-for-external-users-in-6-5\/\" \/>\n<meta property=\"og:site_name\" content=\"The Couchbase Blog\" \/>\n<meta property=\"article:published_time\" content=\"2019-08-08T17:00:16+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-06-14T02:26:17+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/Transactions-2-1-e1630708930818.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1400\" \/>\n\t<meta property=\"og:image:height\" content=\"553\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Chaitra Ramarao, Sr. Product Manager, Couchbase Inc.\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Chaitra Ramarao, Sr. Product Manager, Couchbase Inc.\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/managing-ldap-groups-for-external-users-in-6-5\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/managing-ldap-groups-for-external-users-in-6-5\\\/\"},\"author\":{\"name\":\"Chaitra Ramarao, Sr. Product Manager, Couchbase Inc.\",\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/#\\\/schema\\\/person\\\/852cd95d6c8aa5ea6d4128643cc3c2b6\"},\"headline\":\"Managing LDAP groups for external users in 6.5\",\"datePublished\":\"2019-08-08T17:00:16+00:00\",\"dateModified\":\"2025-06-14T02:26:17+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/managing-ldap-groups-for-external-users-in-6-5\\\/\"},\"wordCount\":941,\"commentCount\":1,\"publisher\":{\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/managing-ldap-groups-for-external-users-in-6-5\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/1\\\/2019\\\/08\\\/Transactions-2-1-e1630708930818.jpg\",\"keywords\":[\"6.5\"],\"articleSection\":[\"Best Practices and Tutorials\",\"Couchbase Server\",\"Security\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/managing-ldap-groups-for-external-users-in-6-5\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/managing-ldap-groups-for-external-users-in-6-5\\\/\",\"url\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/managing-ldap-groups-for-external-users-in-6-5\\\/\",\"name\":\"Managing LDAP groups for external users in 6.5 - The Couchbase Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/managing-ldap-groups-for-external-users-in-6-5\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/managing-ldap-groups-for-external-users-in-6-5\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/1\\\/2019\\\/08\\\/Transactions-2-1-e1630708930818.jpg\",\"datePublished\":\"2019-08-08T17:00:16+00:00\",\"dateModified\":\"2025-06-14T02:26:17+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/managing-ldap-groups-for-external-users-in-6-5\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/managing-ldap-groups-for-external-users-in-6-5\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/managing-ldap-groups-for-external-users-in-6-5\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/1\\\/2019\\\/08\\\/Transactions-2-1-e1630708930818.jpg\",\"contentUrl\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/1\\\/2019\\\/08\\\/Transactions-2-1-e1630708930818.jpg\",\"width\":1400,\"height\":553},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/managing-ldap-groups-for-external-users-in-6-5\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Managing LDAP groups for external users in 6.5\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/\",\"name\":\"The Couchbase Blog\",\"description\":\"Couchbase, the NoSQL Database\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/#organization\",\"name\":\"The Couchbase Blog\",\"url\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/admin-logo.png\",\"contentUrl\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/admin-logo.png\",\"width\":218,\"height\":34,\"caption\":\"The Couchbase Blog\"},\"image\":{\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/#\\\/schema\\\/person\\\/852cd95d6c8aa5ea6d4128643cc3c2b6\",\"name\":\"Chaitra Ramarao, Sr. Product Manager, Couchbase Inc.\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3ce5e2ac49271390c080a82e055d92096b80f63a8f2ca4db5a52af1ace0b06f5?s=96&d=mm&r=g459272ec41e39279e1f7784a97a6b106\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3ce5e2ac49271390c080a82e055d92096b80f63a8f2ca4db5a52af1ace0b06f5?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3ce5e2ac49271390c080a82e055d92096b80f63a8f2ca4db5a52af1ace0b06f5?s=96&d=mm&r=g\",\"caption\":\"Chaitra Ramarao, Sr. Product Manager, Couchbase Inc.\"},\"description\":\"Chaitra Ramarao is a Senior Product Manager at Couchbase, NoSQL database company, leading databases tooling, cross datacenter replication and partner integrations. Her prior gigs include data analytics product management for Kaiser Permanente and software development for Hewlett Packard. She has a Bachelors degree in ECE and a Masters from Carnegie Mellon in Engineering &amp; Technology Innovation Management.\",\"url\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/author\\\/chaitra\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Managing LDAP groups for external users in 6.5 - The Couchbase Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.couchbase.com\/blog\/managing-ldap-groups-for-external-users-in-6-5\/","og_locale":"en_US","og_type":"article","og_title":"Managing LDAP groups for external users in 6.5","og_description":"In the last blog, we described a new feature in Couchbase Server 6.5 called Couchbase groups. In this blog, we will discuss about the new LDAP group capability in Couchbase Server 6.5, along with easy to follow steps to get [&hellip;]","og_url":"https:\/\/www.couchbase.com\/blog\/managing-ldap-groups-for-external-users-in-6-5\/","og_site_name":"The Couchbase Blog","article_published_time":"2019-08-08T17:00:16+00:00","article_modified_time":"2025-06-14T02:26:17+00:00","og_image":[{"width":1400,"height":553,"url":"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/Transactions-2-1-e1630708930818.jpg","type":"image\/jpeg"}],"author":"Chaitra Ramarao, Sr. Product Manager, Couchbase Inc.","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Chaitra Ramarao, Sr. Product Manager, Couchbase Inc.","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.couchbase.com\/blog\/managing-ldap-groups-for-external-users-in-6-5\/#article","isPartOf":{"@id":"https:\/\/www.couchbase.com\/blog\/managing-ldap-groups-for-external-users-in-6-5\/"},"author":{"name":"Chaitra Ramarao, Sr. Product Manager, Couchbase Inc.","@id":"https:\/\/www.couchbase.com\/blog\/#\/schema\/person\/852cd95d6c8aa5ea6d4128643cc3c2b6"},"headline":"Managing LDAP groups for external users in 6.5","datePublished":"2019-08-08T17:00:16+00:00","dateModified":"2025-06-14T02:26:17+00:00","mainEntityOfPage":{"@id":"https:\/\/www.couchbase.com\/blog\/managing-ldap-groups-for-external-users-in-6-5\/"},"wordCount":941,"commentCount":1,"publisher":{"@id":"https:\/\/www.couchbase.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.couchbase.com\/blog\/managing-ldap-groups-for-external-users-in-6-5\/#primaryimage"},"thumbnailUrl":"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/Transactions-2-1-e1630708930818.jpg","keywords":["6.5"],"articleSection":["Best Practices and Tutorials","Couchbase Server","Security"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.couchbase.com\/blog\/managing-ldap-groups-for-external-users-in-6-5\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.couchbase.com\/blog\/managing-ldap-groups-for-external-users-in-6-5\/","url":"https:\/\/www.couchbase.com\/blog\/managing-ldap-groups-for-external-users-in-6-5\/","name":"Managing LDAP groups for external users in 6.5 - The Couchbase Blog","isPartOf":{"@id":"https:\/\/www.couchbase.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.couchbase.com\/blog\/managing-ldap-groups-for-external-users-in-6-5\/#primaryimage"},"image":{"@id":"https:\/\/www.couchbase.com\/blog\/managing-ldap-groups-for-external-users-in-6-5\/#primaryimage"},"thumbnailUrl":"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/Transactions-2-1-e1630708930818.jpg","datePublished":"2019-08-08T17:00:16+00:00","dateModified":"2025-06-14T02:26:17+00:00","breadcrumb":{"@id":"https:\/\/www.couchbase.com\/blog\/managing-ldap-groups-for-external-users-in-6-5\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.couchbase.com\/blog\/managing-ldap-groups-for-external-users-in-6-5\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.couchbase.com\/blog\/managing-ldap-groups-for-external-users-in-6-5\/#primaryimage","url":"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/Transactions-2-1-e1630708930818.jpg","contentUrl":"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2019\/08\/Transactions-2-1-e1630708930818.jpg","width":1400,"height":553},{"@type":"BreadcrumbList","@id":"https:\/\/www.couchbase.com\/blog\/managing-ldap-groups-for-external-users-in-6-5\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.couchbase.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Managing LDAP groups for external users in 6.5"}]},{"@type":"WebSite","@id":"https:\/\/www.couchbase.com\/blog\/#website","url":"https:\/\/www.couchbase.com\/blog\/","name":"The Couchbase Blog","description":"Couchbase, the NoSQL Database","publisher":{"@id":"https:\/\/www.couchbase.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.couchbase.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.couchbase.com\/blog\/#organization","name":"The Couchbase Blog","url":"https:\/\/www.couchbase.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.couchbase.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/2023\/04\/admin-logo.png","contentUrl":"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/2023\/04\/admin-logo.png","width":218,"height":34,"caption":"The Couchbase Blog"},"image":{"@id":"https:\/\/www.couchbase.com\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.couchbase.com\/blog\/#\/schema\/person\/852cd95d6c8aa5ea6d4128643cc3c2b6","name":"Chaitra Ramarao, Sr. Product Manager, Couchbase Inc.","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/3ce5e2ac49271390c080a82e055d92096b80f63a8f2ca4db5a52af1ace0b06f5?s=96&d=mm&r=g459272ec41e39279e1f7784a97a6b106","url":"https:\/\/secure.gravatar.com\/avatar\/3ce5e2ac49271390c080a82e055d92096b80f63a8f2ca4db5a52af1ace0b06f5?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/3ce5e2ac49271390c080a82e055d92096b80f63a8f2ca4db5a52af1ace0b06f5?s=96&d=mm&r=g","caption":"Chaitra Ramarao, Sr. Product Manager, Couchbase Inc."},"description":"Chaitra Ramarao is a Senior Product Manager at Couchbase, NoSQL database company, leading databases tooling, cross datacenter replication and partner integrations. Her prior gigs include data analytics product management for Kaiser Permanente and software development for Hewlett Packard. She has a Bachelors degree in ECE and a Masters from Carnegie Mellon in Engineering &amp; Technology Innovation Management.","url":"https:\/\/www.couchbase.com\/blog\/author\/chaitra\/"}]}},"acf":[],"authors":[{"term_id":9064,"user_id":6588,"is_guest":0,"slug":"chaitra","display_name":"Chaitra Ramarao, Sr. Product Manager, Couchbase Inc.","avatar_url":"https:\/\/secure.gravatar.com\/avatar\/3ce5e2ac49271390c080a82e055d92096b80f63a8f2ca4db5a52af1ace0b06f5?s=96&d=mm&r=g","0":null,"1":"","2":"","3":"","4":"","5":"","6":"","7":"","8":""}],"_links":{"self":[{"href":"https:\/\/www.couchbase.com\/blog\/wp-json\/wp\/v2\/posts\/7376","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.couchbase.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.couchbase.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.couchbase.com\/blog\/wp-json\/wp\/v2\/users\/6588"}],"replies":[{"embeddable":true,"href":"https:\/\/www.couchbase.com\/blog\/wp-json\/wp\/v2\/comments?post=7376"}],"version-history":[{"count":0,"href":"https:\/\/www.couchbase.com\/blog\/wp-json\/wp\/v2\/posts\/7376\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.couchbase.com\/blog\/wp-json\/wp\/v2\/media\/7448"}],"wp:attachment":[{"href":"https:\/\/www.couchbase.com\/blog\/wp-json\/wp\/v2\/media?parent=7376"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.couchbase.com\/blog\/wp-json\/wp\/v2\/categories?post=7376"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.couchbase.com\/blog\/wp-json\/wp\/v2\/tags?post=7376"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.couchbase.com\/blog\/wp-json\/wp\/v2\/ppma_author?post=7376"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}