Re: user accounts using Active Directory

2012-08-22 Thread Ignacio Ocampo
Hi Aastha,

I think that you can develop a Plugin to do it.

Recently, I post a plugin that allow authenticate users through LDAP Server
(
http://nafiux.com/blog/2012/08/16/mysql-ldap-authentication-plugin-clear-password-client-plugin/
).

More info about MySQL Authentication Plugins:
http://dev.mysql.com/doc/refman/5.5/en/authentication-plugins.html

You can build your own plugin with your needs.

Best regards.

On Wed, Aug 22, 2012 at 9:13 AM, Aastha aast...@gmail.com wrote:

 Hello,

 I want to create users and give access to different schema within the
 database.
 I also want to give them selective privileges to access the table in
 different schema.

 One way is to create users in MySQL and then grant with privileges.

 Is there any way to give them access to MySQL database and the tables
 within the schema using active directory.
 Also. is there a way to create group of privileges and assign users to the
 group required.


 Thanks,
 Aastha Gupta




-- 
Ignacio Ocampo Millán


Re: MySQL LDAP Authentication Plugin - Full example with source code

2012-08-20 Thread Ignacio Ocampo
Hi Rick,

The plugin does not need to access to /etc/passwd or /etc/shadow.

It uses an LDAP Server to authenticate the user through
ldap_simple_bind_s function.

Best regards.

On Mon, Aug 20, 2012 at 7:24 PM, Rick James rja...@yahoo-inc.com wrote:

 Does that depend on mysql running as root in order to see /etc/shadow
 (or whatever)?

 If so, that is too big a security hole to do.

  -Original Message-
  From: Ignacio Ocampo [mailto:naf...@gmail.com]
  Sent: Sunday, August 12, 2012 3:54 PM
  To: mysql
  Subject: MySQL LDAP Authentication Plugin - Full example with source
  code
 
  I have published in my blog, an full example (with source code) of a
  LDAP Authentication plugin for MySQL.
 
  http://nafiux.com/blog/2012/08/11/mysql-ldap-authentication-plugin/
 
  --
  Ignacio Ocampo




-- 
Ignacio Ocampo Millán


MySQL LDAP Authentication Plugin - Full example with source code

2012-08-12 Thread Ignacio Ocampo
I have published in my blog, an full example (with source code) of a LDAP
Authentication plugin for MySQL.

http://nafiux.com/blog/2012/08/11/mysql-ldap-authentication-plugin/

-- 
Ignacio Ocampo