Authentication Plugins

Explore the authentication plugins available in MariaDB, such as ed25519, GSSAPI, and PAM, which provide flexible and secure methods for user verification.

Pluggable Authentication Overview

Pluggable authentication allows MariaDB to use various authentication methods, enabling external validation, different hashing algorithms, and role-based access control.

Authentication Plugin - caching_sha2_password

MySQL-compatible caching_sha2_password authentication plugin, for migrating MySQL users to MariaDB without changing their passwords (migration use; PARSEC is recommended otherwise).

Authentication Plugin - ed25519

The ed25519 authentication plugin provides high-security password authentication using the Elliptic Curve Digital Signature Algorithm, a modern alternative to SHA-1.

Authentication Plugin - GSSAPI

Complete GSSAPI authentication setup: Kerberos/SSPI single sign-on, INSTALL SONAME 'auth_gssapi', gssapi_keytab_path/principal_name, CREATE USER syntax.

Authentication Plugin - mysql_native_password

Complete Authentication Plugin - mysql_native_password guide for MariaDB. Complete reference documentation for implementation, configuration, and usage.

Authentication Plugin - mysql_old_password

This plugin provides backward compatibility for pre-4.1 clients using an older, insecure password hashing algorithm and should not be used for new installations.

Authentication Plugin - Named Pipe

The named_pipe authentication plugin allows Windows users connecting via named pipes to authenticate using their operating system credentials without a password.

Authentication Plugin - PARSEC

PARSEC is a modern, secure authentication plugin that uses salted passwords and elliptic curve cryptography to prevent replay attacks and secure user credentials.

Authentication Plugin - SHA-256

The SHA-256 authentication plugin uses the SHA-256 hashing algorithm for password storage, offering stronger security than the default SHA-1 method.

Authentication Plugin - Unix Socket

Official Unix socket authentication: OS user login via SO_PEERCRED/uid matching, CREATE USER IDENTIFIED VIA unix_socket, and unix_socket force modes.

Authentication with Pluggable Authentication Modules (PAM)

Learn about authentication with Pluggable Authentication Modules (PAM) in MariaDB Server. This section details how to integrate MariaDB with PAM for centralized and flexible user authentication.