1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
|
Authentication
==============
Authentication is any process by which you verify that someone is who they
claim they are. [1]_ Drizzle authentication is handled by plugins; there
are no grant or privilege tables.
One or more authentication plugin must be loaded, else no connections can
be made to Drizzle. On most systems, the :doc:`/plugins/auth_all/index`
plugin is loaded by default which, as its name suggests, allows all
connections regardless of username or password. (Some distributions enable
the :doc:`/plugins/auth_file/index` plugin by default instead).
`Choosing an authentication plugin, configuring it, and disabling all other
authentication plugins should be one of your first administrative tasks.`
The following authentication plugins are included with Drizzle:
* :doc:`/plugins/auth_all/index`
* :doc:`/plugins/auth_file/index`
* :doc:`/plugins/auth_http/index`
* :doc:`/plugins/auth_ldap/index`
* :doc:`/plugins/auth_pam/index`
* :doc:`/plugins/auth_schema/index`
Protocols
---------
Drizzle has three protocols which affect how clients send passwords to MySQL:
================== =============
Protocol Password
================== =============
mysql Encrypted
mysql-plugin-auth Plaintext
drizzle (Not used)
================== =============
These protocols correspond to the :ref:`drizzle_command_line_client`
--protocol option.
The mysql protocol is default, but some authentication plugins require
the mysql-plugin-auth protocol:
========================= ==================
Plugin Protocol
========================= ==================
:ref:`auth_all_plugin` Any
:ref:`auth_file_plugin` mysql
:ref:`auth_http_plugin` mysql-plugin-auth
:ref:`auth_ldap_plugin` mysql-plugin-auth
:ref:`auth_pam_plugin` mysql-plugin-auth
:ref:`auth_schema_plugin` mysql
========================= ==================
-------------------------------------------------------------------------------
.. rubric:: Footnotes
.. [1] `Authentication, Authorization, and Access Control <http://httpd.apache.org/docs/1.3/howto/auth.html>`_
|