adjust config files and readme
This commit is contained in:
		| @@ -1,4 +1,13 @@ | |||||||
| [mariadb] | [mariadb] | ||||||
| plugin_load=auth_pam.so | plugin_load=auth_pam | ||||||
|  | pam_use_cleartext_plugin = ON | ||||||
|  |  | ||||||
|  | # create these stuff and enable the following configuration | ||||||
|  | # otherwise the pam_use_cleartext_plugin won't work which | ||||||
|  | # is required for dotnet connections | ||||||
|  | # ssl_cert = /etc/mysql/conf.d/ssl/server-cert.pem | ||||||
|  | # ssl_key = /etc/mysql/conf.d/ssl/server-key.pem | ||||||
|  | # ssl_ca = /etc/mysql/conf.d/ssl/ca.pem | ||||||
|  |  | ||||||
|  |  | ||||||
|  |  | ||||||
|   | |||||||
							
								
								
									
										12
									
								
								readme.md
									
									
									
									
									
								
							
							
						
						
									
										12
									
								
								readme.md
									
									
									
									
									
								
							| @@ -25,4 +25,16 @@ Start the container after creating the required volumes (see documentation of th | |||||||
|       -e MYSQL_ROOT_PASSWORD=test123 \ |       -e MYSQL_ROOT_PASSWORD=test123 \ | ||||||
|       wollud1969/mariadb-with-ldap-pam:latest |       wollud1969/mariadb-with-ldap-pam:latest | ||||||
|  |  | ||||||
|  | Since one important scenario in my environment is access from dotnet applications, where the client plugin dialog is not available (https://mariadb.com/kb/en/library/authentication-plugin-pam/#using-the-plugin-with-mysqlconnector-for-net), I've add the configuration line | ||||||
|  |  | ||||||
|  |     pam_use_cleartext_plugin = ON | ||||||
|  |  | ||||||
|  | to the default configuration. This in turn requires SSL/TLS connections to the database server so I added the SSL configuration to the default config file. | ||||||
|  |  | ||||||
|  | To enable users to access the database server with PAM/LDAP authentication, you still need to create those users in the database: | ||||||
|  |  | ||||||
|  |     CREATE USER username@hostname IDENTIFIED VIA pam USING 'mariadb'; | ||||||
|  |  | ||||||
|  | For details see https://mariadb.com/kb/en/library/authentication-plugin-pam/ | ||||||
|  |  | ||||||
|  |  | ||||||
|   | |||||||
		Reference in New Issue
	
	Block a user