Uploaded image for project: 'MariaDB MaxScale'
  1. MariaDB MaxScale
  2. MXS-2269

Document user and group mapping support for PAM authenticators

Details

    • MXS-SPRINT-74

    Description

      MaxScale's PAM authenticators support user and group mapping, but this is completely undocumented:

      https://mariadb.com/kb/en/mariadb-maxscale-23-pam-authenticator/

      The relevant information and limitations should probably be documented. Feel free to refer to the MariaDB Server documentation that describes the pam_user_map PAM module, where it is relevant:

      https://mariadb.com/kb/en/library/user-and-group-mapping-with-pam/

      One very important thing to document is that based on the commit associated with MXS-1758, it looks like group mapping only works with MaxScale if the proxy user is the ''@'%' anonymous user.

      Attachments

        Issue Links

          relates to

          Bug - A problem which impairs or prevents the functions of the product. MXS-2292 Allow PAM user and group mapping to work with more specific host than '%'

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. MXS-2294 Document how to configure user and group mapping for PAM authenticators

          • Major - Major loss of function.
          • Closed

          New Feature - A new feature of the product, which has yet to be developed. MXS-334 Enable Pam.d Support

          • Major - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. MXS-1758 Support PAM group mapping, like MariaDB Server does

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. MXS-2267 Document which accounts PAM authenticators will actually use

          • Major - Major loss of function.
          • Closed

          Activity

            Ascending order - Click to sort in descending order
            GeoffMontee Geoff Montee (Inactive) created issue -
            GeoffMontee Geoff Montee (Inactive) made changes -
            Field Original Value New Value
            GeoffMontee Geoff Montee (Inactive) made changes -
            johan.wikman Johan Wikman made changes -
            Sprint MXS-SPRINT-74 [ 305 ]
            johan.wikman Johan Wikman made changes -
            Rank Ranked higher
            johan.wikman Johan Wikman made changes -
            Assignee Esa Korhonen [ esa.korhonen ]
            esa.korhonen Esa Korhonen made changes -
            Status Open [ 1 ] In Progress [ 3 ]
            esa.korhonen Esa Korhonen made changes -
            Fix Version/s 2.3.4 [ 23300 ]
            Resolution Fixed [ 1 ]
            Status In Progress [ 3 ] Closed [ 6 ]
            GeoffMontee Geoff Montee (Inactive) made changes -
            GeoffMontee Geoff Montee (Inactive) made changes -
            GeoffMontee Geoff Montee (Inactive) made changes -
            serg Sergei Golubchik made changes -
            Workflow MariaDB v3 [ 91775 ] MariaDB v4 [ 129645 ]
            mariadb-jira-automation Jira Automation (IT) made changes -
            Zendesk Related Tickets 128859

            People

              esa.korhonen Esa Korhonen
              GeoffMontee Geoff Montee (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.