content_image/723954.jpg content_image/723959.jpg content_image/723962.jpg
<img src='content_image/723954.jpg'>

For SASL LDAP authentication, whether connections by the plugin to the LDAP server are secure. If this variable is enabled, the plugin uses TLS to connect securely to the LDAP server. This variable can be set to override the default OpenLDAP TLS configuration; see LDAP Pluggable Authentication and ldap.conf If you enable this variable, you may also wish to set the authentication_ldap_sasl_ca_path  variable. 

MySQL LDAP plugins support the StartTLS method, which initializes TLS on top of a plain LDAP connection. 

As of MySQL 8.0.14, LDAPS can be used by setting the authentication_ldap_sasl_server_port  system variable. 

## • authentication_ldap_sasl_user_search_attr 

<img src='content_image/723959.jpg'>

For SASL LDAP authentication, the name of the attribute that specifies user names in LDAP directory entries. If a user distinguished name is not provided, the authentication plugin searches for the name using this attribute. For example, if the authentication_ldap_sasl_user_search_attr  value is uid , a search for the user name user1  finds entries with a uid  value of user1 . 

## • authentication_ldap_simple_auth_method_name 

<img src='content_image/723962.jpg'>

