On Wed, Oct 19, 2011 at 12:08 AM, Olaf van der Spek
<[email protected]> wrote:
> On Tue, Oct 18, 2011 at 10:42 PM, Henrik Ingo <[email protected]> 
> wrote:
>> So I guess I'm just a very confused Drizzle user, but essentially my
>> question is: If I wanted to use a configuration file for the drizzle
>> client, how would that work?
>
> What options would you like to put in the file?
> The C++ API supports a file, but the normal clients use the C API,
> which don't read any file.

Ah... I think I remember hearing this discussion before!


When using auth_pam, I have to use this parameter:

bin/drizzle -P --protocol mysql-plugin-auth

If a server is configured to use auth_pam as the primary
authentication mechanism (which could be ok for a box with only/mostly
localhost connections) it would make sense to put
"protocol=mysql-plugin-auth" into a configuration file.

FWIW, I would like to see in the future a Drizzle release where
drizzled is compiled as it is now, but we also ship a drizzled.cnf
that has something like this:

# By default, usernames and passwords are stored in the table system.auth_schema
plugin-remove=auth_all
plugin-add=auth_schema
# You can also use your Linux system username and password to connect
to Drizzle.
# Note that auth_pam authentication will send your password
unencrypted over the network!
# You should only use this kind of login as a convenience when using
localhost, otherwise
# it is very insecure! Consider commenting out this line on production
servers that don't need it.
plugin-add=auth_pam

But if users then have to remember an awkward parameter to the drizzle
client, it defeats the purpose of being convenient.

It's true that some of the things you'd traditionally set in the
client section of a my.cnf - such as desperately trying to force
everyone to use UTF-8 - don't matter for Drizzle as it is correct by
default :-) But users could have other needs, for instance why not set
--host --user and --password all in a config file?

(Source: http://hackdrizzle.com/authenticating-with-authentication-plugins/)

henrik
-- 
[email protected]
+358-40-8211286 skype: henrik.ingo irc: hingo
www.openlife.cc

My LinkedIn profile: http://www.linkedin.com/profile/view?id=9522559

_______________________________________________
Mailing list: https://launchpad.net/~drizzle-discuss
Post to     : [email protected]
Unsubscribe : https://launchpad.net/~drizzle-discuss
More help   : https://help.launchpad.net/ListHelp

Reply via email to