Support for unix_socket authentification

[joffrey92]

Hi René,

to connect to the admin of ProxySQL we must provide a password, which can then be stored in a file (ex:.my.cnf). For security, password in files are not the best.

Do you think it would be possible to support authentification via unix_socket ? Ex: the unix logged-in user is "root", and we defined ProxySQL admin user as "root". Then simply logging in via the socket will recognize the system user, and log in.

https://mariadb.com/kb/en/library/authentication-plugin-unix-socket/

Thanks !
Joffrey

[BarbUk]

Hey !
Thanks Jo for the issue.

My initial need was to create a nagios admin user for monitoring.
I do that for maria/mysql like that:

INSTALL PLUGIN unix_socket SONAME 'auth_socket';
CREATE USER 'nagios'@'localhost' IDENTIFIED WITH unix_socket;

This way, the nagios user can connect to the db without password and there is no overhead to handle and secure a file with the password.

Thanks,
Julien

[renecannao]

Hi.
As already discussed, this seems a nice feature to have!