|
A different authentication mechanism for the user still requires the password in clear text. Any token stored as required by the master's authentication plugin of the replica user is effectively a clear text password as it provides the basis of the authentication. If a password isn't needed, nothing is stored, but how is that better?
MDEV-15547 could have provided a PAM based IP mechanism, as weak as it is, but the protocol of the pam plugin got changed.
Without storing a password, it would need to be re-provided before a START REPLICA could occur. Could encrypt the master.info with the encryption key management plugin as a feature request, or better yet, install as table (MDEV-21753) and then you've got the encryption option.
|