On 10/31/2017 03:44 PM, Andrew Meyer via FreeIPA-users wrote:

I've been following this website:

FreeIPA: Giving permissions to service accounts. — Firstyear's blog-a-log

None of that is particularly relevant unless you're specifically supporting MSCHAPv2 authentication.

The easiest solution for authenticating MySQL using FreeIPA is probably to join the MySQL server to the IPA domain and then use PAM authentication: