�→ mysql" target="_blank">LDAP authentication TiDB supports LDAP authentication, which is compatible with 0 码力 | 5716 页 | 104.74 MB | 1 年前

3

target="_ �→ blank">LDAP 身份认证 TiDB 支持与 MySQL 8.0 兼容的 LDAP 身份认证。 增强数据库审计功能（LDAP 身份认证 #43580 @YangKeao 从 v7.1.0 起，TiDB 支 持 LDAP 身 份 认 证， 并 提 供 了 两 种 认 证 插 件：authentication_ldap_sasl 和 authentication_ldap_simple。 更多信息，请参考用户文档。 • 增强数据库审计功能（企业版） default_ �→ authentication �→ _ �→ plugin 修改 扩展可 选值范 围：增加 authentication �→ _ �→ ldap �→ _ �→ sasl 和 authentication �→ _ �→ ldap �→ _ �→ simple �→ 。 tidb_load �→ _based �→ _ �→ replica �→ _read_ �→ threshold

tidb_auth_token authentication Y Y Y Y N N N N N N N authentication_ldap_sasl authentication Y Y N N N N N N N N authentication_ldap_simple authentication Y Y Y N N N N N N N N Password management Y Y admin_user = admin admin_password = admin [snapshots] [users] [auth.anonymous] [auth.basic] [auth.ldap] [smtp] [emails] [log] mode = file [log.console] [log.file] level = info format = text [log.syslog] connections receives the connection. "leastconn" is recommended �→ where long sessions are expected, such as LDAP, SQL and TSE, rather �→ than protocols using short sessions, such as HTTP. The algorithm �→ is dynamic

tidb_auth_token authentication Y Y Y N N N N N N N authentication_ldap_sasl authentication Y N N N N N N N N authentication_ldap_simple authentication Y Y N N N N N N N N Password management Y Y Y admin_user = admin admin_password = admin [snapshots] [users] [auth.anonymous] [auth.basic] [auth.ldap] [smtp] [emails] [log] mode = file [log.console] [log.file] level = info format = text [log.syslog] connections receives the connection. "leastconn" is recommended �→ where long sessions are expected, such as LDAP, SQL and TSE, rather �→ than protocols using short sessions, such as HTTP. The algorithm �→ is dynamic

· · · · · · · · · · · · · · · · · · · · · · · 6725 17.9.2 Lightweight Directory Access Protocol (LDAP) · · · · · · · · · · · · · · · · · · · · 6725 17.9.3 Long Term Support (LTS) · · · · · · · · · · tidb_auth_token authentication Y Y Y Y Y Y Y N N N N N authentication_ldap_sasl authentication Y Y Y Y Y N N N N N N N authentication_ldap_simple authentication Y Y Y Y Y Y N N N N N N Password management admin_user = admin admin_password = admin [snapshots] [users] [auth.anonymous] 1546 [auth.basic] [auth.ldap] [smtp] [emails] [log] mode = file [log.console] [log.file] level = info format = text [log.syslog]

the RU (max) metric on the Resource Control dashboard #49318 @nolouch • Add a timeout mechanism for LDAP authentication to avoid the issue of resource lock (RLock) not being released in time #51883 @YangKeao N tidb_auth_token authentication Y Y Y Y N N N N N authentication_ldap_sasl authentication Y Y N N N N N N N authentication_ldap_simple authentication Y Y Y N N N N N N Password management Y Y Y Y admin_user = admin admin_password = admin [snapshots] [users] [auth.anonymous] [auth.basic] [auth.ldap] [smtp] [emails] [log] mode = file [log.console] [log.file] level = info format = text [log.syslog]

the RU (max) metric on the Resource Control dashboard #49318 @nolouch • Add a timeout mechanism for LDAP authentication to avoid the issue of resource lock (RLock) not being released in time #51883 @YangKeao N tidb_auth_token authentication Y Y Y Y N N N N N authentication_ldap_sasl authentication Y Y N N N N N N N authentication_ldap_simple authentication Y Y Y N N N N N N Password management Y Y Y Y admin_user = admin admin_password = admin [snapshots] [users] [auth.anonymous] 1153 [auth.basic] [auth.ldap] [smtp] [emails] [log] mode = file [log.console] [log.file] level = info format = text [log.syslog]

tidb_auth_token authentication Y Y Y Y Y N N N N N authentication_ldap_sasl authentication Y Y Y N N N N N N N authentication_ldap_simple authentication Y Y Y Y N N N N N N Password management Y Y Y admin_user = admin admin_password = admin [snapshots] [users] [auth.anonymous] 1156 [auth.basic] [auth.ldap] [smtp] [emails] [log] mode = file [log.console] [log.file] level = info format = text [log.syslog] connections receives the connection. "leastconn" is recommended �→ where long sessions are expected, such as LDAP, SQL and TSE, rather �→ than protocols using short sessions, such as HTTP. The algorithm �→ is dynamic

tidb_auth_token authentication Y Y Y Y Y Y N N N N N authentication_ldap_sasl authentication Y Y Y Y N N N N N N N authentication_ldap_simple authentication Y Y Y Y Y N N N N N N Password management Y admin_user = admin admin_password = admin [snapshots] [users] [auth.anonymous] 1161 [auth.basic] [auth.ldap] [smtp] [emails] [log] mode = file [log.console] [log.file] level = info format = text [log.syslog] connections receives the connection. "leastconn" is recommended �→ where long sessions are expected, such as LDAP, SQL and TSE, rather �→ than protocols using short sessions, such as HTTP. The algorithm �→ is dynamic

tidb_auth_token authentication Y Y Y Y Y Y Y N N N N N authentication_ldap_sasl authentication Y Y Y Y Y N N N N N N N authentication_ldap_simple authentication Y Y Y Y Y Y N N N N N N Password management admin_user = admin admin_password = admin [snapshots] [users] [auth.anonymous] 1247 [auth.basic] [auth.ldap] [smtp] [emails] [log] mode = file [log.console] [log.file] level = info format = text [log.syslog] connections receives the connection. "leastconn" is recommended �→ where long sessions are expected, such as LDAP, SQL and TSE, rather �→ than protocols using short sessions, such as HTTP. The algorithm �→ is dynamic