As you may know, since version 5.2.0 (released in April 2010) we
support Pluggable Authentication. Using this feature one
can implement an arbitrary user authentication and account
management policy, completely replacing built-in MariaDB
authentication with its username/password combination and
mysql.user
table.
Also, as you might have heard, Oracle has recently released a PAM authentication plugin for MySQL. Alas, this plugin will not run on MariaDB — although the MySQL implementation of pluggable authentication is based on ours, the API is incompatible. And, being closed source, this plugin cannot be fixed to run in MariaDB. And — I’m not making it up — this plugin does not support communication between the client and the server, so even with this plugin and all the power of PAM the only possible authentication …
[Read more]