Ready to get started?

Learn more about the CData ODBC Driver for Active Directory or download a free trial:

Download Now

Connect to Active Directory Data as a Federated Tables in MySQL

Use the SQL Gateway and the ODBC Driver to set up federated tables for Active Directory data in MySQL .

You can use the SQL Gateway to configure a MySQL remoting service and set up federated tables for Active Directory data. The service is a daemon process that provides a MySQL interface to the CData ODBC Driver for Active Directory: After you have started the service, you can create a server and tables using the FEDERATED Storage Engine in MySQL. You can then work with Active Directory data just as you would local MySQL tables.

Connect to Active Directory Data

If you have not already done so, provide values for the required connection properties in the data source name (DSN). You can use the built-in Microsoft ODBC Data Source Administrator to configure the DSN. This is also the last step of the driver installation. See the "Getting Started" chapter in the help documentation for a guide to using the Microsoft ODBC Data Source Administrator to create and configure a DSN.

To establish a connection, set the following properties:

  • Valid User and Password credentials (e.g., Domain\BobF or cn=Bob F,ou=Employees,dc=Domain).
  • Server information, including the IP or host name of the Server, as well as the Port.
  • BaseDN: This will limit the scope of LDAP searches to the height of the distinguished name provided.

    Note: Specifying a narrow BaseDN may greatly increase performance; for example, cn=users,dc=domain will only return results contained within cn=users and its children.

Configure the SQL Gateway

See the SQL Gateway Overview to set up connectivity to Active Directory data as a virtual MySQL database. You will configure a MySQL remoting service that listens for MySQL requests from clients. The service can be configured in the SQL Gateway UI.

Create a FEDERATED Server and Tables for Active Directory Data

After you have configured and started the service, create a FEDERATED server to simplify the process of creating FEDERATED tables:

Create a FEDERATED Server

The following statement will create a FEDERATED server based on the ODBC Driver for Active Directory. Note that the username and password of the FEDERATED server must match a user account you defined on the Users tab of the SQL Gateway.

CREATE SERVER fedActiveDirectory
FOREIGN DATA WRAPPER mysql
OPTIONS (USER 'sql_gateway_user', PASSWORD 'sql_gateway_passwd', HOST 'sql_gateway_host', PORT ####, DATABASE 'CData ActiveDirectory Sys');

Create a FEDERATED Table

To create a FEDERATED table using our newly created server, use the CONNECTION keyword and pass the name of the FEDERATED server and the remote table (User). Refer to the following template for the statement to create a FEDERATED table:

CREATE TABLE fed_user (
  ...,
  id  TYPE(LEN),
  logoncount  TYPE(LEN),
  ...,
)
ENGINE=FEDERATED
DEFAULT CHARSET=latin1
CONNECTION='fedActiveDirectory/user';

NOTE: The table schema for the FEDERATED table must match the remote table schema exactly. You can always connect directly to the MySQL remoting service using any MySQL client and run a SHOW CREATE TABLE query to get the table schema.

Execute Queries

You can now execute queries to the Active Directory FEDERATED tables from any tool that can connect to MySQL, which is particularly useful if you need to JOIN data from a local table with data from Active Directory. Refer to the following example:

SELECT 
  fed_user.id, 
  local_table.custom_field 
FROM 
  local_table 
JOIN 
  fed_user 
ON 
  local_table.foreign_id = fed_user.id;