The Ultimate Guide to High Availability with MariaDB
This is a read-only copy of the MariaDB Knowledgebase generated on 2024-11-17. For the latest, interactive version please visit https://mariadb.com/kb/.

Windows Authentication on AD

Hi all,

I have a question concerning the authentication plugin interface in MariaDB. We would use MariaDB on a Windows OS and want to authenticate the users against Active Directory. Additionally the users, who have logged in to Windows, should be able to connect from client programs to the server based on the token information in their environment without specifying an additional password (Single-Sign-On functionallity).

MySQL sells this function in the commercial MySQL Enterprise version http://www.mysql.com/products/enterprise/security.html

I have seen articles about authentication with PAM in the linux environment but found nothing about authentication issues in Windows world.

Does there exist something that can be used?

Best regards, nobi

Answer

Yes, there is a GSSAPI plugin thatt can authenticate in Windows AD with Kerberos. It can also authenticate on a standalone computer. See Authentication Plugin - GSSAPI.

Content reproduced on this site is the property of its respective owners, and this content is not reviewed in advance by MariaDB. The views, information and opinions expressed by this content do not necessarily represent those of MariaDB or any other party.