# Kerberos Authentication on MySQL

**URL:** <https://forums.percona.com/t/kerberos-authentication-on-mysql/35634>\
**Category:** Percona Server for MySQL 8.0\
**Created:** [December 13, 2024, 3:37am UTC](https://forums.percona.com/t/kerberos-authentication-on-mysql/35634 "2024-12-13T03:37:43Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![damienka](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/damienka/32/18719_2.png) [@damienka](https://forums.percona.com/u/damienka)\
**Post date:** [December 13, 2024, 3:37am UTC](https://forums.percona.com/t/kerberos-authentication-on-mysql/35634/1 "2024-12-13T03:37:43Z")

</div>

Hi,

I would like to use Kerberos Authentication which is available under Oracle’s Enterprise MySQL distribution. Is this authentication feature available in the Percona MySQL Pro? Is it possible to drop-in the pro kerberos authentication library into XtraDB?

The only other option for password-less login seems to be using SSL certificates and creating users with ‘REQUIRE ISSUER … SUBJECT …’. Looking at the PAM and socket auth methods, these will only work (password-less) on the local DB server and not remotely.

Thanks for any advice,  
Damien

---

<div class="post-metadata">

**Author:** ![matthewb](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/matthewb/32/34_2.png) [@matthewb](https://forums.percona.com/u/matthewb)\
**Post date:** [December 17, 2024, 6:56pm UTC](https://forums.percona.com/t/kerberos-authentication-on-mysql/35634/2 "2024-12-17T18:56:15Z")

</div>

Hi @damienka,  
Percona MySQL does not have a native Kerberos plugin, but you can still accomplish this via the PAM plugin. Here is a relevant docs page, and a blog post:

> **[Percona Server for MySQL - PAM authentication plugin](https://docs.percona.com/percona-server/8.0/pam-plugin.html)**
>
> Percona PAM Authentication Plugin is a free and Open Source implementation of the MySQL’s authentication plugin. This plugin acts as a mediator between the MySQL server, the MySQL client, and the PAM stack. The server plugin requests authentication...

> **[Setting Up Percona PAM with Active Directory for External Authentication](https://www.percona.com/blog/setting-percona-pam-active-directory-external-authentication/)**
>
> In this blog post, we'll look at how to set up Percona PAM with Active Directory for external authentication.