Learn about authentication with MariaDB Enterprise Server. This section covers advanced authentication methods & plugins to enhance security and integrate with enterprise identity management systems.
MariaDB Enterprise Server authentication is performed by database user accounts. Database user accounts are specified by user name, the hostname from which the account is connecting, and the authentication plugins configured for the account, such as mysql_native_password, pam, or unix_socket.
The password for a can be changed using the , , and statements.
If your MariaDB Enterprise Server node has a password validation plugin installed, then the password should also meet the configured requirements. When you try to set or change a user's password and the password validation plugin rejects the password, the following error message will be shown:
By default, the MariaDB Enterprise Server installs the plugin, but the plugin is also available.
For , the password requirements are configured by several system variables:
MariaDB Enterprise Server uses authentication plugins to support different authentication methods. The default authentication plugin is mysql_native_password.
This page is: Copyright © 2025 MariaDB. All rights reserved.
On Debian and Ubuntu:
On SLES:
The gssapi authentication plugin requires some system variables to be configured, including:
gssapi_keytab_path
gssapi_principal_name
For example:
The gssapi authentication plugin must be installed before it can be used.
To install with the INSTALL SONAME statement:
To install in a configuration file with the plugin_load_add option:
To create a user account that uses the gssapi authentication plugin, specify the plugin in the CREATE USER statement:
An optional realm can be specified:
This page is: Copyright © 2025 MariaDB. All rights reserved.
WITH ALTER USER:
ALTER USER 'USER'@'192.0.2.%'
IDENTIFIED BY 'PASSWD';WITH SET PASSWORD:
SET PASSWORD FOR 'USER'@'192.0.2.%'
= PASSWORD('PASSWD');ERROR HY000: Your password does not satisfy the current policy requirements.$ sudo yum install MariaDB-gssapi-server$ sudo apt install mariadb-plugin-gssapi-server$ sudo zypper install MariaDB-gssapi-server[mariadb]
...
gssapi_keytab_path=KEYTAB_PATH
gssapi_principal_name=PRINCIPAL_NAMEINSTALL SONAME 'gssapi';[mariadb]
...
plugin_load_add = auth_gssapiCREATE USER 'USER'@'192.0.2.%'
IDENTIFIED VIA gssapi;CREATE USER 'USER'@'192.0.2.%'
IDENTIFIED VIA gssapi USING 'USER@DOMAIN';