Error by logging in with "iinit" command. How to solve this ?

[Bazi Jana]

Hello,

After that I have configured SSL to use PAM/LDAP Authentication, I 'm trying to login with "iinit". Unfortunately, it is not working. I get this error:

Error occurred while authenticating user [alice] [PLUGIN_ERROR_MISSING_SHARED_OBJECT: [-]    /usr/include/irods/irods_load_plugin.hpp:157:irods::error irods::load_plugin(PluginType *&, const std::string &, const std::string &, const std::string &, const Ts &...) [PluginType = irods::experimental::auth::authentication_base, Ts = <char [14]>] :  status [PLUGIN_ERROR_MISSING_SHARED_OBJECT]  errno [] -- message [shared library does not exist [/usr/lib/irods/plugins/auth/libirods_auth_plugin-pam_client.so]]

Any Idea to solve this problem would be appreciated.

Kind Regards

Jana

[Alan King]

Hi,

If you are running iinit version 4.3.0, you need to change the authentication scheme ("irods_authentication_scheme") in the iRODS client environment from "pam" to "pam_password". I just looked in the docs and realized that this needs to be updated...

Additional background: This change was required to differentiate between the legacy authentication plugins which needed to ship for non-C++ clients and the authentication plugins which use the authentication flow introduced in 4.3.0.

Hope that helps!

Alan

--
--
The Integrated Rule-Oriented Data System (iRODS) - https://irods.org
 
iROD-Chat: http://groups.google.com/group/iROD-Chat
---
You received this message because you are subscribed to the Google Groups "iRODS-Chat" group.
To unsubscribe from this group and stop receiving emails from it, send an email to irod-chat+...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/irod-chat/d6ba641d-94f7-4ecb-8a52-d1e8c1b97f3bn%40googlegroups.com.

--

Alan King

Senior Software Developer | iRODS Consortium

[Alan King]

It was updated here, but has not been published yet: https://github.com/irods/irods_docs/commit/ee4cf50841a4a0d8a242bd96ba1faf8839e15675

[Bazi Jana]

Hi Alan,

Thank you so much. That was the problem! Now it is working.

Kind Regards

Jana

[John]

Hi,

I' m using Python iRODS Client (PRC) with environment file (irods_environment.json). As Alan said above, I use  "pam_password" for "irods_authentication_scheme" instead of using "pam" because I 'm using irods 4.3.

Unfortunately, I' m receiving the error below. I 'm wondering if "pam_password" does not working with Python iRODS Client. How can I solve this please?

(Previously I used irods 4.2.10  and "pam" for "irods_authentication_scheme". This worked without problems).

...

  File "/home/alice/.local/lib/python3.6/site-packages/irods/manager/collection_manager.py", line 21, in get
    query = self.sess.query(Collection).filter(*filters)
  File "/home/alice/.local/lib/python3.6/site-packages/irods/session.py", line 142, in query
    return Query(self, *args)
  File "/home/alice/.local/lib/python3.6/site-packages/irods/query.py", line 44, in __init__
    if self.sess.server_version >= col.min_version:
  File "/home/alice/.local/lib/python3.6/site-packages/irods/session.py", line 166, in server_version
    return self.__server_version()
  File "/home/alice/.local/lib/python3.6/site-packages/irods/session.py", line 173, in __server_version
    conn = self.pool.get_connection()
  File "/home/alice/.local/lib/python3.6/site-packages/irods/pool.py", line 15, in method_
    ret = method(self,*s,**kw)
  File "/home/alice/.local/lib/python3.6/site-packages/irods/pool.py", line 75, in get_connection
    conn = Connection(self, self.account)
  File "/home/alice/.local/lib/python3.6/site-packages/irods/connection.py", line 75, in __init__
    raise ValueError("Unknown authentication scheme %s" % scheme)
ValueError: Unknown authentication scheme pam_password

[Alan King]

PRC does not use the authentication plugins and the new authentication plugin framework introduced in 4.3.0 does not apply to non-C++ clients. PRC doesn't know about "pam_password" (yet).

Whatever PRC was using for 4.2.x should continue to be used and should work for 4.3.0 servers as well. I expect it is just "pam"?

@Daniel Moore might have more to offer about the authentication mechanisms in PRC.

To view this discussion on the web visit https://groups.google.com/d/msgid/irod-chat/59e3e1d2-fff1-4919-9b43-8e31f1ecbb95n%40googlegroups.com.

[John]

Hello Alan,

Many thanks. As you said, I 'm using "PAM" and it is now working as expected.

Kind Regards,

John