mysql auth module

[Antoine Martin]

Should be able to re-use quite a bit of the sqlite auth module (#1488) and pave the way for more generic sql auth options (postgres, whatever).

This may also help with proxy configurations where the servers can register themselves with the proxy, as sql servers can usually be accessed remotely without requiring full user account access or ssh.

[Antoine Martin]

generic sql auth

[Antoine Martin]

Done in r22621.

---

End to end setup and test on Fedora:

• install mariadb:

  sudo dnf install mariadb-server
  sudo systemctl start mariadb
  

• create a database and user for xpra authentication:

  mysql -u root mysql
  > CREATE DATABASE xpra;
  > CREATE USER 'xpra'@'localhost' IDENTIFIED BY 'xpra';
  > GRANT ALL ON xpra.* TO 'xpra'@'localhost';
  

• verify this new user can connect to the database:

  $ mysql -u xpra -pxpra
  

• install the python bindings for mysql:

  sudo dnf install mysql-connector-python3
  

• create the schema:

  URI=mysql://xpra:xpra@localhost
  python3 ./xpra/server/auth/mysql_auth.py $URI create
  

• add a test user with one TCP session on port 10000:

  python3 ./xpra/server/auth/mysql_auth.py $URI add test1 test1 1000 1000 tcp://localhost:10000/
  

• start the session on port 10000:

  xpra start --bind-tcp=0.0.0.0:10000 --no-daemon :20
  

• start the proxy using mysql backend authentication:

  python3 /usr/bin/xpra proxy --no-daemon --bind-tcp=0.0.0.0:14500 --tcp-auth=mysql:uri=$URI
  

• connect a client via the proxy:

  python2 /usr/bin/xpra attach tcp://test1:test1@localhost:14500/
  

[Antoine Martin]

Follow up: #2288 - generic backend

[migration script]

this ticket has been moved to: ​https://github.com/Xpra-org/xpra/issues/2287