Uploaded image for project: 'MariaDB MaxScale'
  1. MariaDB MaxScale
  2. MXS-2267

Document which accounts PAM authenticators will actually use

    XMLWordPrintable

Details

    • MXS-SPRINT-74

    Description

      Based on the query in the commit for MXS-1716, PAM authenticators will only actually use PAM accounts that meet certain conditions.

      https://github.com/mariadb-corporation/MaxScale/commit/aa260cf6cf5a91682fa6176f70d3c55263cec57e

      PAM authenticators will use an account if:

      • It uses the PAM plugin for authentication (plugin=pam in mysql.user).

      And if:

      • It has global SELECT privileges;
      • Or it has some database-level privilege;
      • Or it some table-level privilege.

      This should probably be documented:

      https://mariadb.com/kb/en/mariadb-maxscale-23-pam-authenticator/

      Attachments

        Issue Links

          Activity

            People

              esa.korhonen Esa Korhonen
              GeoffMontee Geoff Montee (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.