问题描述
我正在尝试使用xampp在本地安装的PHP中使用mariadb gssapi插件对gssapi进行用户身份验证。我已经设置了xampp，并且可以进行本地安装。现在，我想使用Windows ldap用户和gssapi身份验证连接到数据库。
在某种程度上可以找到问题所在，但没有任何结果： GSSAPI-Auth with PHP to MariaDB (Windows)
mariadb的gssapi身份验证似乎有效。我在PHPmyadmin中使用身份验证方法= gssapi创建了一个用户。我可以在CLI中进行连接，请参见下图：
Successful mysql connect with domain user
现在尝试连接时
if (($dbcon=MysqLi_connect("localhost","$MysqL_userid","$password"))===FALSE) {
exit("4:Login process Failed while connecting to database");
echo "Debug-Fehlermeldung: " . MysqLi_connect_error . PHP_EOL;
}else{
$auth_result=TRUE;
}
我遇到以下错误：
Warning: MysqLi_connect(): The server requested authentication method unkNown to the client [auth_gssapi_client] in C:\xampp\htdocs\oa5-maria\trunk\login.PHP on line 82
Warning: MysqLi_connect(): (HY000/2054): The server requested authentication method unkNown to the client in C:\xampp\htdocs\oa5-maria\trunk\login.PHP on line 82
4:Login process Failed while connecting to database
我在my.ini文件中设置了default-authentication-plugin = gssapi。但是我不知道这是否是正确的方法。
您有解决此问题的建议吗？
这是我的my.ini文件：
# Example MysqL config file for small systems.
#
# This is for a system with little memory (<= 64M) where MysqL is only used
# from time to time and it's important that the MysqLd daemon
# doesn't use much resources.
#
# You can copy this file to
# C:/xampp/MysqL/bin/my.cnf to set global options,# MysqL-data-dir/my.cnf to set server-specific options (in this
# installation this directory is C:/xampp/MysqL/data) or
# ~/.my.cnf to set user-specific options.
#
# In this file,you can use all long options that a program supports.
# If you want to kNow which options a program supports,run the program
# with the "--help" option.
# The following options will be passed to all MysqL clients
[client]
# password = your_password
port=3306
socket="C:/xampp/MysqL/MysqL.sock"
# Here follows entries for some specific programs
# The MysqL server
default-character-set=utf8mb4
[MysqLd]
port=3306
socket="C:/xampp/MysqL/MysqL.sock"
basedir="C:/xampp/MysqL"
tmpdir="C:/xampp/tmp"
datadir="C:/xampp/MysqL/data"
pid_file="MysqL.pid"
# enable-named-pipe
key_buffer=16M
max_allowed_packet=200M
sort_buffer_size=512K
net_buffer_length=8K
read_buffer_size=256K
read_rnd_buffer_size=512K
myisam_sort_buffer_size=8M
log_error="MysqL_error.log"
#neu für authentifizierung
default-authentication-plugin=gssapi
# Change here for bind listening
# bind-address="127.0.0.1"
# bind-address = ::1 # for ipv6
# Where do all the plugins live
plugin_dir="C:/xampp/MysqL/lib/plugin/"
# Don't listen on a TCP/IP port at all. This can be a security enhancement,# if all processes that need to connect to MysqLd run on the same host.
# All interaction with MysqLd must be made via Unix sockets or named pipes.
# Note that using this option without enabling named pipes on Windows
# (via the "enable-named-pipe" option) will render MysqLd useless!
#
# commented in by lampp security
#skip-networking
#skip-federated
# Replication Master Server (default)
# binary logging is required for replication
# log-bin deactivated by default since XAMPP 1.4.11
#log-bin=MysqL-bin
# required unique id between 1 and 2^32 - 1
# defaults to 1 if master-host is not set
# but will not function as a master if omitted
server-id =1
# Replication Slave (comment out master section to use this)
#
# To configure this host as a replication slave,you can choose between
# two methods :
#
# 1) Use the CHANGE MASTER TO command (fully described in our manual) -
# the Syntax is:
#
# CHANGE MASTER TO MASTER_HOST=<host>,MASTER_PORT=<port>,# MASTER_USER=<user>,MASTER_PASSWORD=<password> ;
#
# where you replace <host>,<user>,<password> by quoted strings and
# <port> by the master's port number (3306 by default).
#
# Example:
#
# CHANGE MASTER TO MASTER_HOST='125.564.12.1',MASTER_PORT=3306,# MASTER_USER='joe',MASTER_PASSWORD='secret';
#
# OR
#
# 2) Set the variables below. However,in case you choose this method,then
# start replication for the first time (even unsuccessfully,for example
# if you mistyped the password in master-password and the slave fails to
# connect),the slave will create a master.info file,and any later
# change in this file to the variables' values below will be ignored and
# overridden by the content of the master.info file,unless you shutdown
# the slave server,delete master.info and restart the slaver server.
# For that reason,you may want to leave the lines below untouched
# (commented) and instead use CHANGE MASTER TO (see above)
#
# required unique id between 2 and 2^32 - 1
# (and different from the master)
# defaults to 2 if master-host is set
# but will not function as a slave if omitted
#server-id = 2
#
# The replication master for this slave - required
#master-host = <hostname>
#
# The username the slave will use for authentication when connecting
# to the master - required
#master-user = <username>
#
# The password the slave will authenticate with when connecting to
# the master - required
#master-password = <password>
#
# The port the master is listening on.
# optional - defaults to 3306
#master-port = <port>
#
# binary logging - not required for slaves,but recommended
#log-bin=MysqL-bin
# Point the following paths to different dedicated disks
#tmpdir = "C:/xampp/tmp"
#log-update = /path-to-dedicated-directory/hostname
# Uncomment the following if you are using BDB tables
#bdb_cache_size = 4M
#bdb_max_lock = 10000
# Comment the following if you are using InnoDB tables
#skip-innodb
innodb_data_home_dir="C:/xampp/MysqL/data"
innodb_data_file_path=ibdata1:10M:autoextend
innodb_log_group_home_dir="C:/xampp/MysqL/data"
#innodb_log_arch_dir = "C:/xampp/MysqL/data"
## You can set .._buffer_pool_size up to 50 - 80 %
## of RAM but beware of setting memory usage too high
innodb_buffer_pool_size=16M
## Set .._log_file_size to 25 % of buffer pool size
innodb_log_file_size=5M
innodb_log_buffer_size=8M
innodb_flush_log_at_trx_commit=1
innodb_lock_wait_timeout=50
## UTF 8 Settings
#init-connect=\'SET NAMES utf8\'
#collation_server=utf8_unicode_ci
#character_set_server=utf8
#skip-character-set-client-handshake
#character_sets-dir="C:/xampp/MysqL/share/charsets"
sql_mode=NO_ZERO_IN_DATE,NO_ZERO_DATE,NO_ENGINE_SUBSTITUTION
log_bin_trust_function_creators=1
character-set-server=utf8mb4
collation-server=utf8mb4_general_ci
[MysqLdump]
max_allowed_packet=16M
[MysqL]
# Remove the next comment character if you are not familiar with sql
#safe-updates
[isamchk]
key_buffer=20M
sort_buffer_size=20M
read_buffer=2M
write_buffer=2M
[myisamchk]
key_buffer=20M
sort_buffer_size=20M
read_buffer=2M
write_buffer=2M
[MysqLhotcopy]
lower_case_table_names=0
解决方法
您的客户端和PHP之间的区别在于，客户端与libmariadb链接（因此可以加载auth_gssapi_plugin，而mysqli与libmysql或PHP的内部mysqlnd驱动程序链接。
除了Kerberos / GSSAPI之外，MariaDB还提供ed25519和pam身份验证（通过对话框插件），libmysql和mysqlnd不支持。
不幸的是，针对MariaDB Connector / C构建ext / mysqli无法正常工作，并且解决该问题的最近请求请求也被拒绝。