akritikos
5744f4b7db
- Implemented sync-roles.sh to synchronize Active Directory group memberships as MariaDB roles and user accounts. - Created Containerfile for building a custom ldap2pg image with patched YAML decoding. - Added provision-user-db.sh for provisioning user databases and roles based on LDAP synchronization. - Introduced a new Containerfile for MariaDB with PAM authentication via pam_ldap. - Configured PAM service for MariaDB logins and added necessary plugins for LDAP authentication. - Implemented health checks and entrypoint scripts for MariaDB and pgpool containers. - Enhanced PostgreSQL image with additional extensions and custom pg_hba.conf for improved security and functionality.
12 lines
556 B
INI
12 lines
556 B
INI
# Image-owned plugin preload (analogue of the postgres image's
|
|
# shared_preload_libraries in 10-extensions.conf). auth_pam provides Active
|
|
# Directory logins via PAM -> pam_ldap.
|
|
[mariadb]
|
|
plugin_load_add = auth_pam
|
|
|
|
# Make auth_pam use the mysql_clear_password protocol instead of the interactive
|
|
# "dialog" one. Required for MaxScale: its clear_pw_passthrough only speaks
|
|
# mysql_native_password / mysql_clear_password to backends, never dialog. The
|
|
# password is sent in cleartext, so TLS must be on (99-tls.cnf) — it is.
|
|
pam_use_cleartext_plugin = 1
|