Commit Graph

23 Commits

Author SHA1 Message Date
1bf46fadf6 MXS-2891: Log password hash on mismatch
By logging the password hash when user authentication fails due to a
password mismatch, we can be certain what the client sent and what is the
currently stored value in MaxScale. This should not be on by default which
is why a new parameter is required.
2020-03-04 17:11:34 +02:00
29ec15c8eb Update documentation for 2.4.1
Small changes to MariaDBMonitor and Pam authenticator.
2019-08-16 12:18:39 +03:00
5a5d625b15 Update MariaDBMonitor and PAM authenticator documentation 2019-06-03 12:15:13 +03:00
ab7c19e1a4 MXS-2294 Update PAM authenticator documentation
Updated with new functionality. Also explains the account mapping more.
2019-02-22 15:31:40 +02:00
8e74a1ac6b Add example to lower_case_table_names documentation
The syntax isn't super obvious so having an example helps.
2019-02-04 11:15:39 +02:00
6322fd37bf Merge branch '2.2' into 2.3 2019-01-28 15:34:09 +02:00
cdabee6f06 MXS-2269 Explain PAM anonymous group mapping 2019-01-24 16:48:07 +02:00
97c0c76321 MXS-2267 Document requirements for an accepted PAM user
The requirements are typical of MaxScale authenticators.
Also, fixes the fallback PAM service.
2019-01-24 16:44:34 +02:00
d87d462c76 MXS-2049: Update GSSAPI documentation
Corrected the documentation and provided more details on how to configure
the authenticator.
2018-10-02 09:44:01 +03:00
05402208a5 Merge branch '2.1' into 2.2 2018-01-19 11:47:13 +02:00
5273cbada6 MXS-1600: Add case-insensitive matching to MySQLAuth
The authenticator now supports similar identifier matching as the MariaDB
server. The lower_case_table_names parameter explains its intended use
(case-insensitive identifier matching):
https://mariadb.com/kb/en/library/server-system-variables/#lower_case_table_names
2018-01-16 13:51:22 +02:00
d64868f058 Change MySQL[Client|Backend] to MariaDB[Client|Backend] 2018-01-05 10:01:50 +02:00
2708a4d7ac Add PAM authenticator documentation
Also fixed some small errors in general authenticator documentation.
2017-08-07 12:22:59 +03:00
ed97b4b22c Update documentation 2017-05-18 15:58:23 +03:00
09086994bf 2.1 doc johan (#126)
* Update Documentation-Contents.md

* Update SchemaRouter-technical.md

* Update Plugin-development-guide.md

* Update Replication-Proxy-Binlog-Router-Tutorial.md

* Update MaxScale-HA-with-lsyncd.md

* Update MaxScale-Information-Schema.md

* Update Galera-Cluster-Read-Write-Splitting-Tutorial.md

* Update GSSAPI-Authenticator.md
2017-04-20 14:59:52 +03:00
6bcf0b1fd6 Add build requirements to GSSAPI authenticator documentation
The GSSAPI authenticator documentation now lists the packages it requires
when it is being built.
2017-01-24 20:36:39 +02:00
468411250d Fix old header names in modules
Some of the modules still used the gw_authenticator.h name.
2017-01-20 16:57:04 +02:00
c9b56fca75 Add system configuration to GSSAPI documentation
The GSSAPI authenticator documentation now has a section on how to set up
the environment.
2016-12-14 11:23:17 +02:00
b2e11d41d5 MXS-536: Add option to MySQLAuth that skips authentication
Disabling authentication in MaxScale allows creation of users which act
like wildcard users but require that the connection is made through
MaxScale.
2016-12-02 14:28:58 +02:00
c915ea71aa Update the user credential cache documentation
The release notes now mention that the caching is done by the
authenticators, not by the core. It also mentions that only MySQLAuth
implements this functionality.

Added notes to binlogrouter documentation about the changes to the loading
and storing of users.

Cleaned up MySQL-Authenticator document to make it a bit easier to read.
2016-10-21 18:33:35 +03:00
fe689504b0 Move service user injection into MySQL authenticator
The MySQL authenticator now injects the service user into the list of
allowed users if loading of database users fails. This allows the removal
of common code in the binlogrouter and maxinfo modules.
2016-10-21 18:33:35 +03:00
d938f0e72f Add custom cache directory for MySQLAuth
The MySQLAuth authenticator can now store the cached credentials in a
custom location. This is intended for the binlogrouter, which currently
uses a different location for the user cache.

The MySQL authentication modules now have their own document in the
Authenticators directory. Right now this document only describes the
general details of the MySQL authentication and the new option.
2016-10-20 09:26:54 +03:00
db4b6793c4 MXS-862: Add authenticator documentation
The authentication process in MaxScale is now described in
Authentication-Modules.md. The GSSAPI authenticator also has its own
document.
2016-10-13 15:58:21 +03:00