Assumptions and Prerequisites

This document assumes that you are familiar with Kerberos concepts and know how to administer a realm. Depending on your Kerberos environment, some of the guidance in this document may require changes to adhere to your realm’s configuration.

Before you can start using Kerberos authentication in SingleStoreDB, ensure that your system meets the following prerequisites:

• MemSQL Version: 5.7.4 or later

• SingleStore Client: Typically installed on the main deployment host when deploying SingleStoreDB. Instructions for installing the client on a supported Linux host are also provided in this guide.

• MariaDB Client Version: An alternative to the SingleStore client. Currently, no official MySQL clients support Kerberos/GSSAPI authentication. However, specific MariaDB clients do support Kerberos, and they are compatible with SingleStoreDB. Refer to Connect with Application Development Tools for the ODBC, JDBC, and C++ clients that you can use to authenticate SingleStoreDB users.

• MariaDB GSSAPI Authentication Plugin: In addition to a MariaDB client or connector, you must also have the GSSAPI authentication plugin available on the connecting host. The plugin is then referenced in the connection string when connecting with a client or connector. The GSSAPI plugin is packaged with the MariaDB database software itself, so you must download one of the stable or prerelease versions here. Once downloaded, the plugin is located in a path such as mariadb-<version>/plugin for Linux/Unix, or mariadb-<version>\lib\plugin for Windows. For more information about this plugin, refer to the MariaDB documentation.