Bug #6733 Kerberos user authentication support

• Submitted: 20 Nov 2004 23:32
• Modified: 21 Nov 2004 13:46
• Reporter: [ name withheld ]
• Status: Verified
• Category: MySQL Server: C API (client library)
• Severity: S4 (Feature request)
• OS: Any
• CPU Architecture: Any

[20 Nov 2004 23:32] [ name withheld ]

Description:
it would be very nice if mysql supported Kerberos/GSSAPI authentication (using mit krb5 or heimdal version), this way it would be possible to have a Single Sign On when mysqld is used.

How to repeat:
it is a feature request

[21 Nov 2004 13:46] Sergei Golubchik

Yes, such a feature is planned.
It is in todo, but not on the very top, though...

[28 Jun 2006 12:37] Jesper Angelo

We need this too. Its the last missing link in a total switch to Kerberos 5.

So we would celebrate if MySQL could support (prioritized):
- krb5
- PAM
- LDAP
- NTLM

But I guess it won't be this summer :-/

[1 Dec 2007 21:26] C.J. Adams-Collier

IMHO, it would be better to add support for SASL authentication, both CMU and GNU, rather than implementing native support for each of the mentioned mechanisms.

[3 Jun 2010 15:29] James Cape

Just to note, this feature would be extremely useful (also mainly concerned about KRB5/GSSAPI)

[2 Nov 2010 18:39] Mikhail T

"Me too". Our entire network uses Kerberos -- but logins to MySQL databases still require a separate password database...

[1 Aug 2012 13:52] Georgi Kodinov

Not exactly the real thing, but MySQL now has a PAM authentication plugin that can talk to Kerberos.