Authentication Plugins To associate MySQL accounts with an LDAP plugin, see Using LDAP Pluggable Authentication. Additional Notes for SELinux On systems running EL6 or EL that have SELinux enabled, changes to the SELinux policy are required to enable the MySQL LDAP plugins to communicate with the LDAP service: 1. Create a file  mysqlldap.te  with these contents: 2. Compile the security policy module into a binary representation: 3. Create an SELinux policy module package: 4. Install the module package: 5. When the SELinux policy changes have been made, restart the MySQL server: •If you installed the plugins at server startup using  --plugin-load-add  options, restart the server without those options. •If you installed the plugins at runtime using  INSTALL PLUGIN , they remain installed across server restarts. To uninstall them, use  UNINSTALL PLUGIN : 1338 For installations that use OpenLDAP, the  ldap.conf  file provides global defaults for LDAP clients. Options can be set in this file to affect LDAP clients, including the LDAP authentication plugins. OpenLDAP uses configuration options in this order of precedence: In addition, remove from your  my.cnf  file any startup options that set LDAP plugin-related system variables. If you used  SET PERSIST  to persist LDAP system variables, use  RESET PERSIST  to remove the settings. The method used to uninstall the LDAP authentication plugins depends on how you installed them: Uninstalling LDAP Pluggable Authentication LDAP Pluggable Authentication and ldap.conf UNINSTALL PLUGIN authentication_ldap_simple; UNINSTALL PLUGIN authentication_ldap_sasl; module mysqlldap 1.0; require { type ldap_port_t; type mysqld_t; class tcp_socket name_connect; } #============= mysqld_t ============== allow mysqld_t ldap_port_t:tcp_socket name_connect; checkmodule -M -m mysqlldap.te -o mysqlldap.mod semodule_package -m mysqlldap.mod -o mysqlldap.pp semodule -i mysqlldap.pp service mysqld restart