Comments - Authentication Plugin - GSSAPI

6 years, 1 month ago Lawrin Novitsky

You need to point ODBC connector to the directory with auth_gssapi_client plugin. e.g. that can be "C:\Program Files\MariaDB 10.2\lib\plugin". To do that you have to specify PLUGIN_DIR connection string parameter, or set that property in your DSN config. You also might need to obtain (proper)auth_gssapi_client.dll in case you don't have server installed on your system, or if your server is 64bit, and C/ODBC is 32bit(or vice versa)

 
6 years, 1 month ago Oskar Pilarski

Thank you for reply. I have set the plugin_dir inside my.ini file and the variable is set fine.

Do you know where I can a proper auth_gssapi_client.dll? I did a quick search for it but can't find anything.

 
6 years, 1 month ago Lawrin Novitsky

You can either get from server distribution, or from Connector/C distribution. But I would not trust my.ini Underlying Conncetor/C attempts to read my.ini in default places, and default (for C/C) sections, but I wouldn't be sure that your my.ini is in default location for it. Set plugin_dir in your DSN configuration, or in the connection string

 
6 years, 1 month ago Leonida Golfrè

Hi, I have the same issue if I try connecting via remote server using Heidi SQL or other clients.

Environment: Mariadb 10.2 on Windows Server 2012

These are the tasks I've done till now:

- Enable gssapi plugin

- create usr1 matching with usr1@example.com

- Test Kerberos login from localhost without any issue

- ODBC user DSN configuration on remote server, pointing to remote plugin folder on mariaDB server -> [ma-3.0.3] Plugin auth_gssapi_client could not be loaded: The specified module could not be found

- Copy auth_gssapi_client.dll from MariaDB server to remote server

- ODBC user DSN configuration on remote server (in which Mariadb is not installed) pointing to copied DLL -> [ma-3.0.3] Plugin auth_gssapi_client could not be loaded: The specified module could not be found

If I try the connection via root user remotely it's always ok, if I try with usr1 I get always the error above.

Please can someone help me to resolve this issue?

 
6 years, 1 month ago Lawrin Novitsky

You don't need auth_gssapi_client.dll on remote server. It has to be on you client machine, where your odbc application is run from. And for the same reason it DSN has to be configured on local macnine, too.

 
Content reproduced on this site is the property of its respective owners, and this content is not reviewed in advance by MariaDB. The views, information and opinions expressed by this content do not necessarily represent those of MariaDB or any other party.