Authentication Plugins • authentication_ldap_sasl_server_host For SASL LDAP authentication, the LDAP server host. The permitted values for this variable depend on the authentication method: •For  authentication_ldap_sasl_auth_method_name=SCRAM-SHA-1 : The LDAP server host can be a host name or IP address. •For  authentication_ldap_sasl_auth_method_name=SCRAM-SHA-256 : The LDAP server host can be a host name or IP address. • authentication_ldap_sasl_server_port • authentication_ldap_sasl_tls For SASL LDAP authentication, the LDAP server TCP/IP port number. As of MySQL 8.0.14, if the LDAP port number is configured as 636 or 3269, the plugin uses LDAPS (LDAP over SSL) instead of LDAP. (LDAPS differs from  startTLS .) 1368 Command-Line Format --authentication-ldap-sasl-server- host=host_name System Variable authentication_ldap_sasl_server_host Scope Global Dynamic Yes SET_VAR  Hint Applies No Type String Command-Line Format --authentication-ldap-sasl-server- port=port_num System Variable authentication_ldap_sasl_server_port Scope Global Dynamic Yes SET_VAR  Hint Applies No Type Integer Default Value 389 Minimum Value 1 Maximum Value 32376 Command-Line Format --authentication-ldap-sasl-tls[={OFF| ON}] System Variable authentication_ldap_sasl_tls Scope Global Dynamic Yes SET_VAR  Hint Applies No Type Boolean