3306, an optional Database field, Cmd+K to change database in place, SSL/TLS starting on Preferred, AWS IAM, SSH tunnels, and a Unix socket for a server on this Mac. MariaDB 10.x and later are supported. The rest of this page is what differs.
Connection URL
Both schemes open a connection;mariadb:// creates a MariaDB connection, mysql:// a MySQL one:
socket works as it does on MySQL. See Connection URL Reference.
Kerberos
For an account createdIDENTIFIED VIA gssapi, set Authentication to Kerberos (GSSAPI) and set Username to the account name. Leave Kerberos Principal and Password blank to use the ticket in your credential cache, or enter [email protected] and your domain password to have one requested at connect. Get a cached ticket with kinit [email protected].
The server names its own service principal, set in gssapi_principal_name, and this Mac has to reach the realm’s KDC. The option appears on MariaDB connections only: MySQL’s Kerberos plugin is a different one, which the bundled connector does not have.
Any other Authentication refuses an account IDENTIFIED VIA gssapi with This account signs in with Kerberos., so a connection never signs in with a ticket it was not set up for.
Differences from MySQL
- The default authentication plugin is
mysql_native_password, againstcaching_sha2_passwordon MySQL 8. Both connect. - MariaDB stores JSON in a LONGTEXT column. The driver reads MariaDB’s extended field attributes and types those columns as JSON, so their values open in the JSON editor instead of as plain text.
- Virtual and persistent columns are detected on every version, including the bare
VIRTUALandPERSISTENTspelling that 10.1 and older report, and are left out of generated INSERT and UPDATE statements. - A query timeout goes in as
SET SESSION max_statement_time, counted in seconds. MySQL takesmax_execution_timein milliseconds. - 10.2.1 to 10.2.21 and 10.3.0 to 10.3.9 enforce check constraints without publishing an
information_schema.CHECK_CONSTRAINTSto read them from. The Constraints tab takes them out ofSHOW CREATE TABLEon those releases and out of the catalog everywhere else. - Sequences appear in the sidebar’s Sequences section, read-only, with Drop Sequence on the menu. See Sequences.
- A table declared
WITH SYSTEM VERSIONINGis listed as an ordinary table and loses Truncate alone, which the server refuses with error 4137. - A temporary table shadowing a base table of the same name is left out of the listing, so the name appears once.


A JSON value open in the JSON editor
Limitations
- Cloud SQL Auth Proxy is not offered for MariaDB. That transport appears for MySQL, PostgreSQL and SQL Server only. Reach a server that is not directly routable through an SSH tunnel.
- Users & Roles reads
mysql.userand reports every row there as a user, never as a role. Create and grant MariaDB roles with SQL in the editor.
Related
- MySQL, for connection fields, common setups, SSL/TLS and troubleshooting
- SSH Tunneling

