Using LDAP (AD) for MySQL authentication

Question

I'm trying to come up with a plan to allow users to auth with a MySQL database (many, actually) using LDAP. More specifically, ActiveDirectory. Database will likely be accessed through applications, not web. What are my options?

EDIT:

Okay. It seems that there is no "official" way to allow authentication on MySQL using LDAP. What other options exist? Can we synchronize LDAP users and passwords to the MySQL user table?

Answer 1

Please looks at https://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-7.html

This is in the 5.5.7 release candidate

Answer 2

I personally can't find any information that suggests this is possible. All I see is using MySQL as the data store for the LDAP directory.

Answer 3

this is possible with mysql proxy. there's a few things you need to know to make this work:

• mysql proxy can execute shell commands
• mysql proxy can intercept and rewrite authentication

these two pages will help you get started:

• example of running a shell command: http://forge.mysql.com/tools/tool.php?id=79
• example of intercepting and rewriting authentication: http://web.archive.org/web/20150329071023/http://jan.kneschke.de/2009/6/25/mysql-proxy-roles/