Authentication Plugins Default Value OFF For SASL LDAP authentication, whether connections by the plugin to the LDAP server are secure. If this variable is enabled, the plugin uses TLS to connect securely to the LDAP server. This variable can be set to override the default OpenLDAP TLS configuration; see LDAP Pluggable Authentication and ldap.conf If you enable this variable, you may also wish to set the authentication_ldap_sasl_ca_path  variable. MySQL LDAP plugins support the StartTLS method, which initializes TLS on top of a plain LDAP connection. As of MySQL 8.0.14, LDAPS can be used by setting the authentication_ldap_sasl_server_port  system variable. • authentication_ldap_sasl_user_search_attr Command-Line Format --authentication-ldap-sasl-user- search-attr=value System Variable authentication_ldap_sasl_user_search_attr Scope Global Dynamic Yes SET_VAR  Hint Applies No Type String Default Value uid For SASL LDAP authentication, the name of the attribute that specifies user names in LDAP directory entries. If a user distinguished name is not provided, the authentication plugin searches for the name using this attribute. For example, if the  authentication_ldap_sasl_user_search_attr  value is uid , a search for the user name  user1  finds entries with a  uid  value of  user1 . • authentication_ldap_simple_auth_method_name Command-Line Format --authentication-ldap-simple-auth- method-name=value System Variable authentication_ldap_simple_auth_method_name Scope Global Dynamic Yes SET_VAR  Hint Applies No Type String Default Value SIMPLE Valid Values SIMPLE 1369