Michal Schorm added a comment - 2019-03-20 04:31 I was able to reproduce the issue without touching aconadi. 1) Set up valid /etc/krb5.keytab 2) enable the gssapi plugin in the configuration file 3) start server 4) echo "CREATE USER 'krb_usr'@'localhost' IDENTIFIED VIA gssapi;" | mysql 5) Write a simple code and try to connect as that user: #include <stdio.h> #include <mysql.h>   int main( int argc, char **argv) { MYSQL *con = mysql_init(NULL);   if (con == NULL) { fprintf (stderr, "%s\n" , mysql_error(con)); exit (1); }   if (mysql_real_connect(con, "localhost" , "krb_usr" , "" , NULL, 0, NULL, 0) == NULL) { fprintf (stderr, "%s\n" , mysql_error(con)); mysql_close(con); exit (1); }   if (mysql_query(con, "CREATE DATABASE testdb_xyz" )) { fprintf (stderr, "%s\n" , mysql_error(con)); mysql_close(con); exit (1); }   mysql_close(con); exit (0); } You will get an error: # ./mariadb_program Plugin auth_gssapi_client could not be loaded: lib64 /mariadb/plugin/auth_gssapi_client .so: cannot open shared object file : No such file or directory This makes the plugin completely unusable. Since gssapi is quite commonly used, I find it as a quite severe bug! IMHO same kind of issue as CONC-376

Michal Schorm added a comment - 2019-05-21 07:44 I believe this issue is rather important. The PR I opened fixes the bug for Fedora and should also for the others. Can you please take a look at it?