MySQL

In a previous post I showed that by default when authentication_ldap_simple communicates with a Windows Domain Controller (or any other LDAP service), then the password is transmitted unencrypted during authentication. This time I’ll demonstrate how to close this loophole.  A pre-requisite is that the Domain Controller needs to be configured to accept secure connections. This is …

Adding a little TLS complexity to authentication_ldap_simple Read More »

A quick one in case anyone else hits the same problem as I encountered.  The documentation for authentication_ldap_sasl_log_status and  authentication_ldap_simple_log_status states these variables can be set to a value between 1 and 5 to control the types of messages logged. If you set them and still find nothing is logged then sett log_error_verbosity to it’s maximum value of …

(MySQL) Logged and Loaded: authentication_ldap_simple_log_status or authentication_ldap_sasl_log_status not effective? Read More »

I mentioned in my previous blog entry that had I encountered an issue with this plugin, and I think now that it has been fixed in the latest MySQL versions (released on 2019-04-25) it’s reasonable to share my findings. The following tests are with MySQL Version 8.0.13. I start by installing the plugin, pointing it …

Let the wrong one in! MySQL AD Authentication with authentication_ldap_simple Read More »