~drizzle-trunk/drizzle/development

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
Authentication
==============

Authentication is any process by which you verify that someone is who they
claim they are. [1]_  Drizzle authentication is handled by plugins; there
are no grant or privilege tables.

One or more authentication plugin must be loaded, else no connections can
be made to Drizzle.  On most systems, the :doc:`/plugins/auth_all/index`
plugin is loaded by default which, as its name suggests, allows all
connections regardless of username or password.  (Some distributions enable
the :doc:`/plugins/auth_file/index` plugin by default instead).

`Choosing an authentication plugin, configuring it, and disabling all other
authentication plugins should be one of your first administrative tasks.`

The following authentication plugins are included with Drizzle:

* :doc:`/plugins/auth_all/index`
* :doc:`/plugins/auth_file/index`
* :doc:`/plugins/auth_http/index`
* :doc:`/plugins/auth_ldap/index`
* :doc:`/plugins/auth_pam/index`
* :doc:`/plugins/auth_schema/index`

Protocols
---------

Drizzle has three protocols which affect how clients send passwords to MySQL:

================== =============
Protocol           Password
================== =============
mysql              Encrypted
mysql-plugin-auth  Plaintext
drizzle            (Not used)
================== =============

These protocols correspond to the :ref:`drizzle_command_line_client`
--protocol option.

The mysql protocol is default, but some authentication plugins require
the mysql-plugin-auth protocol:

=========================  ==================
Plugin                     Protocol
=========================  ==================
:ref:`auth_all_plugin`     Any
:ref:`auth_file_plugin`    mysql
:ref:`auth_http_plugin`    mysql-plugin-auth
:ref:`auth_ldap_plugin`    mysql-plugin-auth
:ref:`auth_pam_plugin`     mysql-plugin-auth
:ref:`auth_schema_plugin`  mysql
=========================  ==================

-------------------------------------------------------------------------------

.. rubric:: Footnotes

.. [1] `Authentication, Authorization, and Access Control <http://httpd.apache.org/docs/1.3/howto/auth.html>`_