Login Authentication #

Overview #

In order to ensure the security of user data and distributed configuration information, DBPlusEngine-Proxy provides the user authentication feature, which cannot be turned off. Otherwise, the unauthenticated client connection will be rejected. Currently, DBPlusEngine-Proxy supports a variety of user authentication protocols, including:

• MySQL Client: mysql_native_password, mysql_clear_password
• PostgreSQL Client: MD5, password
• openGauss Client: scram-sha-256

At the same time, in order to facilitate the unified identity management of enterprise users, DBPlusEngine also provides LDAP (Lightweight Directory Access Protocol) authentication. LDAP authentication has supported MySQL and PostgreSQL clients.

Characteristic #

Users do not need to consider which protocol to choose when using DBPlusEngine-Proxy. The protocol negotiation process is automatically completed between DBPlusEngine and the client.

• When using MySQL client, mysql_native_password is used by default. Only when the user needs LDAP authentication, DBPlusEngine communication will require the client switch to mysql_clear_password.
• When using PostgreSQL client, MD5 is used by default. Only when the user needs LDAP authentication, DBPlusEngine communication will require the client switch to password.