Add support for allowCleartextPasswords in MySQL DSN configuration #233

New Issue

MrUnknownDE · 2026-04-05T16:16:01+02:00

MrUnknownDE commented

2026-04-05 16:16:01 +02:00

Originally created by @PabloBagliere on 1/14/2026

Hello,
First of all, I really like Databasus and I would like to start using it at a larger scale.

We are currently trying to use it with MySQL over SSL, but we are facing an issue in a very common setup:
we connect to MySQL through a bastion host, and the MySQL users are configured with the mysql_clear_password authentication plugin.

When testing the connection, we get the following error:

failed to ping MySQL database 'test': this user requires clear text authentication. If you still want to use it, please add 'allowCleartextPasswords=1' to your DSN

The issue is that currently it is not possible to add the allowCleartextPasswords=1 parameter to the MySQL DSN, which is required when using this authentication plugin (even when TLS/SSL is enabled).

For this reason, I would like to request, the possibility to add an additional parameter during MySQL DSN creation that allows enabling:

allowCleartextPasswords=1

Similar to what was already implemented for MariaDB in this issue:
https://github.com/databasus/databasus/issues/235#issuecomment-3732620707

This would allow proper support for MySQL connections using mysql_clear_password in SSL/TLS environments, without requiring source code modifications.

Thank you very much, and great job on the project!

*Originally created by @PabloBagliere on 1/14/2026* Hello, First of all, I really like Databasus and I would like to start using it at a larger scale. We are currently trying to use it with MySQL over SSL, but we are facing an issue in a very common setup: we connect to MySQL through a bastion host, and the MySQL users are configured with the mysql_clear_password authentication plugin. When testing the connection, we get the following error: failed to ping MySQL database 'test': this user requires clear text authentication. If you still want to use it, please add 'allowCleartextPasswords=1' to your DSN The issue is that currently it is not possible to add the allowCleartextPasswords=1 parameter to the MySQL DSN, which is required when using this authentication plugin (even when TLS/SSL is enabled). For this reason, I would like to request, the possibility to add an additional parameter during MySQL DSN creation that allows enabling: allowCleartextPasswords=1 Similar to what was already implemented for MariaDB in this issue: https://github.com/databasus/databasus/issues/235#issuecomment-3732620707 This would allow proper support for MySQL connections using mysql_clear_password in SSL/TLS environments, without requiring source code modifications. Thank you very much, and great job on the project!

MrUnknownDE closed this issue

2026-04-05 16:16:02 +02:00

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/databasus#233