Assumptions and Prerequisites
This document assumes that you are familiar with Kerberos concepts and know how to administer a realm.
Before you can start using Kerberos authentication in SingleStore, ensure that your system meets the following prerequisites:
MemSQL Version: 5.
7. 4 or later
SingleStore Client: Typically installed on the main deployment host when deploying SingleStore.
Instructions for installing the client on a supported Linux host are also provided in this guide.
MariaDB Client Version: An alternative to the SingleStore client.
Currently, no official MySQL clients support Kerberos/GSSAPI authentication. However, specific MariaDB clients do support Kerberos, and they are compatible with SingleStore. Refer to Connect with Application Development Tools for the ODBC, JDBC, and C++ clients that you can use to authenticate SingleStore users.
MariaDB GSSAPI Authentication Plugin: In addition to a MariaDB client or connector, you must also have the GSSAPI authentication plugin available on the connecting host.
The plugin is then referenced in the connection string when connecting with a client or connector. The GSSAPI plugin is packaged with the MariaDB database software itself, so you must download one of the stable or prerelease versions here. Once downloaded, the plugin is located in a path such as
mariadb-<version>/pluginfor Linux/Unix, or
For more information about this plugin, refer to the MariaDB documentation.
Last modified: October 11, 2022