Follow these steps to enable kerberos authentication on Maria Db running on a Windows machine:
Install the gssapi plugin:
INSTALL SONAME 'auth_gssapi';
Create a user which is identified using this plugin:
CREATE user `user` IDENTIFIED VIA gssapi AS 'user@desktop-25bmcvc';
Grant permissions:
GRANT ALL PRIVILEGES ON *.* TO 'user' IDENTIFIED VIA gssapi;
If connecting with HeidiSQL, leave empty user and password.
To see the current user, run
SELECT USER();
In .NET the connection string should be "host=<host>;database=<db>;user=user"
Starting from version 10.6.0, there is now an option to map a local or AD group to a Maria DB user.
Instead of writing 'user@domain' we should write 'GROUP:groupname'