Account Options

  1. Sign in
The old Google Groups will be going away soon, but your browser is incompatible with the new version.
Google Groups Home
« Groups Home
Message from discussion PAM Authentication

Received: by 10.43.51.137 with SMTP id vi9mr7386878icb.16.1346190813226;
        Tue, 28 Aug 2012 14:53:33 -0700 (PDT)
X-BeenThere: percona-discussion@googlegroups.com
Received: by 10.50.178.73 with SMTP id cw9ls9242035igc.4.canary; Tue, 28 Aug
 2012 14:53:32 -0700 (PDT)
Received: by 10.50.158.169 with SMTP id wv9mr7802259igb.3.1346190812560;
        Tue, 28 Aug 2012 14:53:32 -0700 (PDT)
Received: by 10.50.158.169 with SMTP id wv9mr7802258igb.3.1346190812549;
        Tue, 28 Aug 2012 14:53:32 -0700 (PDT)
Return-Path: <danillo...@gmail.com>
Received: from mail-ob0-f172.google.com (mail-ob0-f172.google.com [209.85.214.172])
        by gmr-mx.google.com with ESMTPS id mb9si1600956igc.1.2012.08.28.14.53.32
        (version=TLSv1/SSLv3 cipher=OTHER);
        Tue, 28 Aug 2012 14:53:32 -0700 (PDT)
Received-SPF: pass (google.com: domain of danillo...@gmail.com designates 209.85.214.172 as permitted sender) client-ip=209.85.214.172;
Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of danillo...@gmail.com designates 209.85.214.172 as permitted sender) smtp.mail=danillo...@gmail.com; dkim=pass header...@gmail.com
Received: by obbwc20 with SMTP id wc20so11808299obb.17
        for <percona-discussion@googlegroups.com>; Tue, 28 Aug 2012 14:53:32 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:from:date:message-id:subject:to:content-type;
        bh=ApYNRCyNPZSnNcZhu3BAUuF4tcT7UnFGjuD/Bt5i7oc=;
        b=XlsM9T/GQ33bNK0amh/BAo3rFxP3YDnL2HnfKErYuv5WbjbxVyGyVVegfYXe8TduoG
         +e3fqRrv2yP4hxN/sX69thHaXGH6PvaV34Op/Rtyb7E9mr5CcnFDN6BzrK549RW4OdcR
         1o75aXDALJgKgvHcpDkC/rnYUOlrXiYzp9y3o5lzH54KZ4ttibi+OJ7HlN050yUWoTYH
         AydkKWt8rDS2p7x9pL3b/faiRZRAN/DKy3OKITqcZ8nIbOxRjFLPcIYVLzVVu9//Hg6e
         v9NTFtJpsh12eTngKMNZSCAEgdYlTdehjH+QbsCDky/mkScK7RNOIUY/7y0aM6nHkuWa
         U0dw==
Received: by 10.182.169.40 with SMTP id ab8mr13471490obc.34.1346190812171;
 Tue, 28 Aug 2012 14:53:32 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.76.138.134 with HTTP; Tue, 28 Aug 2012 14:53:12 -0700 (PDT)
From: Danillo Souza <danillo...@gmail.com>
Date: Tue, 28 Aug 2012 18:53:12 -0300
Message-ID: <CAP9UwnwFcB4V5Qqjv1Aao7MN3QDbf=nZkNXZgk3jX3SmXMh...@mail.gmail.com>
Subject: PAM Authentication
To: percona-discussion@googlegroups.com
Content-Type: text/plain; charset=UTF-8

Hi guys,


I'm trying to use Percona's PAM and apparently it have been installed correctly:

+-----------------------+----------+--------------------+-------------+---------+
| Name                  | Status   | Type               | Library
| License |
+-----------------------+----------+--------------------+-------------+---------+
....
| auth_pam              | ACTIVE   | AUTHENTICATION     | auth_pam.so
| GPL     |
+-----------------------+----------+--------------------+-------------+---------+



but when i try to log in using my Ubuntu credentials, I got the following error:
===================
mysql -udanillo -p123
ERROR 1045 (28000): Access denied for user 'danillo'@'localhost'
(using password: YES)
===================



The /var/log/auth.log puts the following:
===================
Aug 28 18:41:38 moip-kubuntu unix_chkpwd[13261]: check pass; user unknown
Aug 28 18:41:38 moip-kubuntu unix_chkpwd[13261]: password check failed
for user (danillo)
Aug 28 18:41:38 moip-kubuntu mysqld[12438]: pam_unix(mysqld:auth):
authentication failure; logname= uid=113 euid=113 tty= ruser=danillo
rhost=localhost  user=danillo
===================
where uid 113 = mysql;



I've already edited my.cnf adding the plugin-dir under [client] tag
and created a user danillo like following:
===================
CREATE USER 'danillo'@'localhost' IDENTIFIED WITH auth_pam;
===================



The /etc/pam.d/mysqld is just like:
================== [I already tried to remove the 'includes']
@include common-auth

auth       required              pam_unix.so audit
account    required              pam_unix.so audit
@include common-account
@include common-session-noninteractive
==================


I'm using Ubuntu 12.04, MySQL 5.5.25 and PAM downloaded via brz
following the Percona's PAM's Documentation.


Any clue about it?


Thanks and sorry about my English,

Danillo Souza