On ti, 31 loka 2017, Gordon Messmer via FreeIPA-users wrote:
On 10/31/2017 03:44 PM, Andrew Meyer via FreeIPA-users wrote:
>
>I've been following this website:
>FreeIPA: Giving permissions to service accounts. — Firstyear's
>blog-a-log
<
http://firstyear.id.au/blog/html/2015/07/06/FreeIPA:_Giving_permissions_t...
None of that is particularly relevant unless you're specifically
supporting MSCHAPv2 authentication.
The easiest solution for authenticating MySQL using FreeIPA is
probably to join the MySQL server to the IPA domain and then use PAM
authentication:
https://dev.mysql.com/doc/refman/5.5/en/pam-pluggable-authentication.html If you are
using MariaDB instead of MySQL, it is possible to configure
GSSAPI (Kerberos) to authenticate. You'd still need to create users in
MariaDB database first so that it knows these are valid ones:
https://mariadb.com/kb/en/library/authentication-plugin-gssapi/
--
/ Alexander Bokovoy