MySQL uses LDAP to fetch user, credential, and group information. MySQL Workbench users connect to the MySQL server by providing the MySQL user name and LDAP password.
The LDAP User/Password
connection method
supports simple LDAP authentication. The
mysql_clear_password
client-side plugin is
compatible with the
authentication_ldap_simple
server-side
plugin. MySQL Workbench enables the client-side
mysql_clear_password
authentication plugin
explicitly for this connection method.
The server-side plugin must be loaded before you begin (see Installing LDAP Pluggable Authentication). For an overview of how LDAP authentication works with MySQL, see How LDAP Authentication of MySQL Users Works.
Connection values for the LDAP User/Password
connection method include:
Parameters Tab
Hostname: The host name or IP address of the MySQL server that communicates with the LDAP server.
Port: The TCP/IP port number of the server host, such as 3306.
Username: User name of the account to be authenticated. LDAP users to be authenticated by MySQL must be present in the directory managed by the LDAP server.
Password: The LDAP password of the user account. If you enter no password here, you are prompted to enter the password when MySQL Workbench attempts to establish the connection. MySQL Workbench can store the password in a vault.
Default Schema: When the connection to the server is established, this option sets the schema that becomes the default schema for use in other parts of MySQL Workbench. For simplicity, you can leave the default schema value blank during the initial setup and set the default value later, if needed.
SSL Tab
The SSL options for this connection method are the same as
Standard TCP/IP
(see
SSL Tab).
The client-side and server-side plugins for this connection method communicate the password as cleartext. No password hashing or encryption is used, so a secure connection between MySQL Workbench and the server is recommended to prevent password exposure.
Advanced Tab
The advanced options for this connection method are similar to
Standard TCP/IP
(see
Advanced Tab). The Enable
Cleartext Authentication Plugin option does not apply
to this connection method.