[MXS-2269] Document user and group mapping support for PAM authenticators Created: 2019-01-16  Updated: 2020-08-25  Resolved: 2019-01-24

Status: Closed
Project: MariaDB MaxScale
Component/s: Authenticator, Documentation
Affects Version/s: 2.3.2
Fix Version/s: 2.3.4

Type: Task Priority: Major
Reporter: Geoff Montee (Inactive) Assignee: Esa Korhonen
Resolution: Fixed Votes: 0
Labels: None

Issue Links:
Relates
relates to MXS-2292 Allow PAM user and group mapping to w... Closed
relates to MXS-2294 Document how to configure user and gr... Closed
relates to MXS-334 Enable Pam.d Support Closed
relates to MXS-1758 Support PAM group mapping, like Maria... Closed
relates to MXS-2267 Document which accounts PAM authentic... Closed
Sprint: MXS-SPRINT-74

 Description   

MaxScale's PAM authenticators support user and group mapping, but this is completely undocumented:

https://mariadb.com/kb/en/mariadb-maxscale-23-pam-authenticator/

The relevant information and limitations should probably be documented. Feel free to refer to the MariaDB Server documentation that describes the pam_user_map PAM module, where it is relevant:

https://mariadb.com/kb/en/library/user-and-group-mapping-with-pam/

One very important thing to document is that based on the commit associated with MXS-1758, it looks like group mapping only works with MaxScale if the proxy user is the ''@'%' anonymous user.
Generated at Thu Feb 08 04:12:54 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.