MySQL Workbench 6.0.6 PAM Auth Fails

Bug #1216208 reported by Jervin R
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Percona Server moved to https://jira.percona.com/projects/PS
Invalid
Undecided
Unassigned
5.1
Invalid
Undecided
Unassigned
5.5
Invalid
Undecided
Unassigned
5.6
Invalid
Undecided
Unassigned
percona-pam-for-mysql
Invalid
Undecided
Unassigned

Bug Description

Description:
When connecting to server with PAM authentication enabled - testing the connection works fine but trying to actually use the new connection i.e. double click from the list returns an access denied error.

Below is the log from PAM when access denied:

Aug 24 00:59:21 centos6 mysqld: pam_warn(mysqld:auth): function=[pam_sm_authenticate] service=[mysqld] terminal=[<unknown>] user=[apc_user] ruser=[apc_user] rhost=[localhost]
Aug 24 00:59:21 centos6 unix_chkpwd[12538]: password check failed for user (apc_user)
Aug 24 00:59:21 centos6 mysqld: pam_unix(mysqld:auth): authentication failure; logname= uid=497 euid=497 tty= ruser=apc_user rhost=localhost user=apc_user

And is when I only do connection test:

Aug 24 01:00:35 centos6 mysqld: pam_warn(mysqld:auth): function=[pam_sm_authenticate] service=[mysqld] terminal=[<unknown>] user=[apc_user] ruser=[apc_user] rhost=[localhost]

Note this is tested only with Percona Server with its auth_pam_compat that is meant to be compatible with the one that comes with enterprise subscription from Oracle. So this may be Percona Server specific as well, I hope Oracle can verify if this is or not a bug with Workbench.

Percona Server 5.5.32 on Linux, WB 6.0.6 on Windows 7 x64

How to repeat:
1. Follow this procedure for the apc_user http://www.mysqlperformanceblog.com/2013/08/14/getting-percona-pam-to-work-with-percona-se...
2. Setup a connection on WB make sure to toggle enable cleartext authentication under Advanced tab.

Reported upstream to verify whether this is WB specific http://bugs.mysql.com/bug.php?id=70142

Revision history for this message
Laurynas Biveinis (laurynas-biveinis) wrote :

Does it work with any older MySQL Workbench version?

Revision history for this message
Jervin R (revin) wrote :

@Laurynas,

I've tested this on 6.0.6 and first GA 6.0.2, same behavior - older version that this does not support loading the cleartext plugin yet.

Revision history for this message
Laurynas Biveinis (laurynas-biveinis) wrote :

What about older major versions? 5.x?

Revision history for this message
Jervin R (revin) wrote :

@Laurynas, older versions then 6.x of WB have no support for cleartext plugin.

Revision history for this message
Roel Van de Paar (roel11) wrote :

Upstream bug report status: Can't repeat

Revision history for this message
Valerii Kravchuk (valerii-kravchuk) wrote :

Last comment in upstream bug says that this is repatable with WB 6.0.7 and Percona Server 5.5.33 (probably).

Revision history for this message
Nilnandan Joshi (nilnandan-joshi) wrote :

I have tested with WB 6.0.9 , Ubuntu 13.04 and PS 5.5.35. Its working for me. I can able to add, save and test connection, also connect to mysql with enable cleartext authentication under Advanced tab. (by double clicking)

Revision history for this message
Nilnandan Joshi (nilnandan-joshi) wrote :

It is working for me with WB 6.0.9 , Ubuntu 13.04 and PS 5.6.15 too.

Changed in percona-pam-for-mysql:
status: New → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.