Uploaded image for project: 'MariaDB MaxScale'
  1. MariaDB MaxScale
  2. MXS-2267

Document which accounts PAM authenticators will actually use

    Details

    • Sprint:
      MXS-SPRINT-74

      Description

      Based on the query in the commit for MXS-1716, PAM authenticators will only actually use PAM accounts that meet certain conditions.

      https://github.com/mariadb-corporation/MaxScale/commit/aa260cf6cf5a91682fa6176f70d3c55263cec57e

      PAM authenticators will use an account if:

      • It uses the PAM plugin for authentication (plugin=pam in mysql.user).

      And if:

      • It has global SELECT privileges;
      • Or it has some database-level privilege;
      • Or it some table-level privilege.

      This should probably be documented:

      https://mariadb.com/kb/en/mariadb-maxscale-23-pam-authenticator/

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                esa.korhonen Esa Korhonen
                Reporter:
                GeoffMontee Geoff Montee
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: