Windows Authentication on AD
Hi all,
I have a question concerning the authentication plugin interface in MariaDB. We would use MariaDB on a Windows OS and want to authenticate the users against Active Directory. Additionally the users, who have logged in to Windows, should be able to connect from client programs to the server based on the token information in their environment without specifying an additional password (Single-Sign-On functionallity).
MySQL sells this function in the commercial MySQL Enterprise version http://www.mysql.com/products/enterprise/security.html
I have seen articles about authentication with PAM in the linux environment but found nothing about authentication issues in Windows world.
Does there exist something that can be used?
Best regards, nobi
Answer
Yes, there is GSSAPI plugin can authenticate in Windows AD with Kerberos. It can also authenticate on standalone computer . Details here https://mariadb.com/kb/en/the-mariadb-library/authentication-plugin-gssapi/