Percona PAM plugin

[Dan Rogart]

Hi-

I have been doing some testing with the Percona PAM plugin and I have a few questions.

Documentation here http://www.percona.com/doc/percona-pam-for-mysql/intro.html refers to an Oracle compatible version, but I cannot find it in any of the download bundles available.  Anyone know where I can find it for testing?

Additionally, I have things set up and working in MySQL 5.5.22 using ldap for authentication.  However, I have found that the Percona plugin must be installed on all client machines when making connections.  Is this expected behavior?  I'm really looking for something I can install on the server only and then clients will work without additional software (assuming they use the correct base mysql client version).

Any help is appreciated.

Thanks much,

Dan Rogart

[Laurynas Biveinis]

Hi -

> Documentation here
> http://www.percona.com/doc/percona-pam-for-mysql/intro.html refers to an
> Oracle compatible version, but I cannot find it in any of the download
> bundles available. Anyone know where I can find it for testing?

It shares the same distribution. The difference is that you INSTALL
PLUGIN with auth_pam_compat.so and specify IDENTIFIED WITH
auth_pam_compat for CREATE USER commands.

> Additionally, I have things set up and working in MySQL 5.5.22 using ldap
> for authentication. However, I have found that the Percona plugin must be
> installed on all client machines when making connections. Is this expected
> behavior?

Yes, the client plugin is needed for the full plugin.

> I'm really looking for something I can install on the server only
> and then clients will work without additional software (assuming they use
> the correct base mysql client version).

The compat plugin should help you then - it uses then standard
Oracle-shipped client plugin, available by default.

--
Laurynas
www.percona.com

[Dan Rogart]

Thanks, but I don't see auth_pam_compat.so bundled as part of the binaries, rpms, or src files available.  Am I missing something obvious?

-Dan

[Laurynas Biveinis]

Dan -

I just checked the Percona Server 5.5.27 generic binaries and RHEL 6
RPM, and auth_pam_compat.so is there. Which binary packages do you
use?

Thanks,
Laurynas

> --
> You received this message because you are subscribed to the Google Groups
> "Percona Discussion" group.
> To view this discussion on the web visit
> https://groups.google.com/d/msg/percona-discussion/-/EsUlLVIJTS4J.
>
> To post to this group, send email to percona-d...@googlegroups.com.
> To unsubscribe from this group, send email to
> percona-discuss...@googlegroups.com.
> For more options, visit this group at
> http://groups.google.com/group/percona-discussion?hl=en.



--
Laurynas
www.percona.com

[Dan Rogart]

OK, thanks.  I was able to find it bundled with the 5.5.27 Percona server tarball and use it from there.

I was looking in the standalone downloads found here: http://www.percona.com/downloads/Percona-PAM-plugin/0.1/ .  All of those seem to lack the compat .so file from what I can tell.

I should have been more clear: I am installing and using the plugin with the Oracle community version, so that's why I was trying to download just the plugin instead of having it automatically incorporated with a Percona release.

Thanks much for the help,

Dan

> percona-discussion+unsub...@googlegroups.com.

[Laurynas Biveinis]

The binaries in
http://www.percona.com/downloads/Percona-PAM-plugin/0.1/ are of a very
early preview release, the compat plugin was not present back then. I
understand that going to Percona PAM plugin download area and finding
only this might be confusing, maybe we can improve this.

>> > percona-discuss...@googlegroups.com.

>> > For more options, visit this group at
>> > http://groups.google.com/group/percona-discussion?hl=en.
>>
>>
>>
>> --
>> Laurynas
>> www.percona.com
>

> --
> You received this message because you are subscribed to the Google Groups
> "Percona Discussion" group.
> To view this discussion on the web visit

> https://groups.google.com/d/msg/percona-discussion/-/RHGhImePZUEJ.

>
> To post to this group, send email to percona-d...@googlegroups.com.
> To unsubscribe from this group, send email to

> percona-discuss...@googlegroups.com.