v2.23 Preview Preview release - not for production v2024.1 STS Stable release with standard-term support v2.20 LTS Stable release with long-term support v2.18 STS Stable release with standard-term support v2.14 LTS Stable release with long-term support Unsupported versions

Authentication methods

Verify that users and clients are who they say they are

Authentication is the process by which the database server establishes the identity of the client, and by extension determines whether the client application (or the user who runs the client application) is permitted to connect with the database user name that was requested. YugabyteDB offers a number of different client authentication methods. The method used to authenticate a particular client connection can be selected on the basis of (client) host address, database, and user.

Note

The authentication methods do not require any external security infrastructure and are the quickest way for YugabyteDB DBAs to secure the database. Password authentication is the easiest choice for authenticating remote user connections.

YugabyteDB supports the following methods for authenticating users.

Password
Authenticate using MD5 or SCRAM-SHA-256 authentication methods.
LDAP
Use an external LDAP service to perform client authentication.
Host
Fine-grained authentication for local and remote clients based on IP addresses.
Trust
Allow clients to connect using a database user name.