Uploaded image for project: 'MariaDB MaxScale'
  1. MariaDB MaxScale
  2. MXS-2267

Document which accounts PAM authenticators will actually use

    XMLWordPrintable

Details

    • MXS-SPRINT-74

    Description

      Based on the query in the commit for MXS-1716, PAM authenticators will only actually use PAM accounts that meet certain conditions.

      https://github.com/mariadb-corporation/MaxScale/commit/aa260cf6cf5a91682fa6176f70d3c55263cec57e

      PAM authenticators will use an account if:

      • It uses the PAM plugin for authentication (plugin=pam in mysql.user).

      And if:

      • It has global SELECT privileges;
      • Or it has some database-level privilege;
      • Or it some table-level privilege.

      This should probably be documented:

      https://mariadb.com/kb/en/mariadb-maxscale-23-pam-authenticator/

      Attachments

        Issue Links

          relates to

          Task - A task that needs to be done. MXS-2269 Document user and group mapping support for PAM authenticators

          • Major - Major loss of function.
          • Closed

          New Feature - A new feature of the product, which has yet to be developed. MXS-334 Enable Pam.d Support

          • Major - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. MXS-1716 "show dbusers ...service..." returns empty list when using PAMAuth

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. MXS-2294 Document how to configure user and group mapping for PAM authenticators

          • Major - Major loss of function.
          • Closed

          Activity

            People

              esa.korhonen Esa Korhonen
              GeoffMontee Geoff Montee
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.