✨ Commits existing images to git
- Implemented sync-roles.sh to synchronize Active Directory group memberships as MariaDB roles and user accounts. - Created Containerfile for building a custom ldap2pg image with patched YAML decoding. - Added provision-user-db.sh for provisioning user databases and roles based on LDAP synchronization. - Introduced a new Containerfile for MariaDB with PAM authentication via pam_ldap. - Configured PAM service for MariaDB logins and added necessary plugins for LDAP authentication. - Implemented health checks and entrypoint scripts for MariaDB and pgpool containers. - Enhanced PostgreSQL image with additional extensions and custom pg_hba.conf for improved security and functionality.
This commit is contained in:
20 files changed
+1023
No files matched your search
@@ -0,0 +1,11 @@
|
||||
# Image-owned plugin preload (analogue of the postgres image's
|
||||
# shared_preload_libraries in 10-extensions.conf). auth_pam provides Active
|
||||
# Directory logins via PAM -> pam_ldap.
|
||||
[mariadb]
|
||||
plugin_load_add = auth_pam
|
||||
|
||||
# Make auth_pam use the mysql_clear_password protocol instead of the interactive
|
||||
# "dialog" one. Required for MaxScale: its clear_pw_passthrough only speaks
|
||||
# mysql_native_password / mysql_clear_password to backends, never dialog. The
|
||||
# password is sent in cleartext, so TLS must be on (99-tls.cnf) — it is.
|
||||
pam_use_cleartext_plugin = 1
|
||||
Reference in new issue
Block a user