Authentication Failure PAM/LDAP
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
percona-pam-for-mysql |
New
|
Undecided
|
Unassigned |
Bug Description
I'm having significant trouble getting db authentication to function. I try to log into a phpMyAdmin interface using ldapuser1 or ldapuser2 and It's like it tries but can't seem to make it happen. Could someone help point me in the right direction to get this functional?
Overview
1) I have a server setup to authenticate against a 389 LDAP server.
2) The SSH session authentication works. i.e. I'm able to log in via LDAP credentials to a shell.
3) I've compiled the plugin successfully and loaded it into MySQL.
4) I've added pam.d/ entries as specified.
5) I've attempted to use the auth_pam and auth_pam_compat options.
5) I've restarted services and rebooted the server.
NOTE: any information deemed sensitive has been modified to remove it but keep the messages intact otherwise.
In the end I continue to get the following errors in auth.log:
Aug 11 17:01:45 dbhost mysqld[2554]: pam_unix(
Aug 11 17:01:45 dbhost mysqld[2554]: pam_unix(
My setup is as follows:
{ /etc/pam.d/mysqld contents }
# Standard Un*x authentication.
auth required pam_warn.so
auth required pam_unix.so audit
account required pam_unix.so audit
{ MySQL Lib Directory Contents }
root@dbhost:
adt_null.so auth_pam.so dialog.la mypluglib.so semisync_master.so
auth_pam_compat.la auth.so dialog.so qa_auth_client.so semisync_slave.so
auth_pam_compat.so auth_socket.so ha_example.so qa_auth_
auth_pam.la auth_test_plugin.so libdaemon_
{ MySQL Plugin Info }
mysql> show plugins;
+------
| Name | Status | Type | Library | License |
+------
| binlog | ACTIVE | STORAGE ENGINE | NULL | GPL |
| mysql_native_
| mysql_old_password | ACTIVE | AUTHENTICATION | NULL | GPL |
| MEMORY | ACTIVE | STORAGE ENGINE | NULL | GPL |
| MyISAM | ACTIVE | STORAGE ENGINE | NULL | GPL |
| CSV | ACTIVE | STORAGE ENGINE | NULL | GPL |
| MRG_MYISAM | ACTIVE | STORAGE ENGINE | NULL | GPL |
| InnoDB | ACTIVE | STORAGE ENGINE | NULL | GPL |
| INNODB_TRX | ACTIVE | INFORMATION SCHEMA | NULL | GPL |
| INNODB_LOCKS | ACTIVE | INFORMATION SCHEMA | NULL | GPL |
| INNODB_LOCK_WAITS | ACTIVE | INFORMATION SCHEMA | NULL | GPL |
| INNODB_CMP | ACTIVE | INFORMATION SCHEMA | NULL | GPL |
| INNODB_CMP_RESET | ACTIVE | INFORMATION SCHEMA | NULL | GPL |
| INNODB_CMPMEM | ACTIVE | INFORMATION SCHEMA | NULL | GPL |
| INNODB_CMPMEM_RESET | ACTIVE | INFORMATION SCHEMA | NULL | GPL |
| INNODB_BUFFER_PAGE | ACTIVE | INFORMATION SCHEMA | NULL | GPL |
| INNODB_
| INNODB_
| BLACKHOLE | ACTIVE | STORAGE ENGINE | NULL | GPL |
| ARCHIVE | ACTIVE | STORAGE ENGINE | NULL | GPL |
| FEDERATED | DISABLED | STORAGE ENGINE | NULL | GPL |
| PERFORMANCE_SCHEMA | ACTIVE | STORAGE ENGINE | NULL | GPL |
| partition | ACTIVE | STORAGE ENGINE | NULL | GPL |
| auth_pam | ACTIVE | AUTHENTICATION | auth_pam.so | GPL |
| auth_pam_compat | ACTIVE | AUTHENTICATION | auth_pam_compat.so | GPL |
+------
{ MySQL access to the shadow file }
root@dbhost:
shadow:x:42:mysql
root@dbhost:
-rw-r----- 1 root shadow 863 Jun 29 14:55 /etc/shadow
{ General results of getent call to check LDAP connectivity }
root@dbhost:
root:x:
daemon:
bin:x:2:
sys:x:3:
sync:x:
games:x:
man:x:6:
lp:x:7:7:lp:/var/spool/lpd:/bin/sh
mail:x:
news:x:
uucp:x:
proxy:x:
www-data:
backup:
list:x:
irc:x:39:
gnats:x:41:41:Gnats Bug-Reporting System (admin)
nobody:
libuuid:
Debian-
statd:x:
sshd:x:
ntp:x:104:
mysql:x:
ldapuser1:
ldapuser2:
{ I've used the following reference sites for setup or troubleshooting }
http://
http://
Anyone have any ideas about this?