5.3.4.1 LDAP User/Password

MySQL uses LDAP to fetch user, credential, and group information. MySQL Workbench users connect to the MySQL server by providing the MySQL user name and LDAP password.

The LDAP User/Password connection method supports simple LDAP authentication. The mysql_clear_password client-side plugin is compatible with the authentication_ldap_simple server-side plugin. MySQL Workbench enables the client-side mysql_clear_password authentication plugin explicitly for this connection method.

The server-side plugin must be loaded before you begin (see Installing LDAP Pluggable Authentication). For an overview of how LDAP authentication works with MySQL, see How LDAP Authentication of MySQL Users Works.

Connection values for the LDAP User/Password connection method include:

Parameters Tab

Hostname: The host name or IP address of the MySQL server that communicates with the LDAP server.
Port: The TCP/IP port number of the server host, such as 3306.
Username: User name of the account to be authenticated. LDAP users to be authenticated by MySQL must be present in the directory managed by the LDAP server.
Password: The LDAP password of the user account. If you enter no password here, you are prompted to enter the password when MySQL Workbench attempts to establish the connection. MySQL Workbench can store the password in a vault.
Default Schema: When the connection to the server is established, this option sets the schema that becomes the default schema for use in other parts of MySQL Workbench. For simplicity, you can leave the default schema value blank during the initial setup and set the default value later, if needed.

SSL Tab

The SSL options for this connection method are the same as Standard TCP/IP (see SSL Tab).

Important

The client-side and server-side plugins for this connection method communicate the password as cleartext. No password hashing or encryption is used, so a secure connection between MySQL Workbench and the server is recommended to prevent password exposure.

Advanced Tab

The advanced options for this connection method are similar to Standard TCP/IP (see Advanced Tab). The Enable Cleartext Authentication Plugin option does not apply to this connection method.