Type:
Task
Priority:
Major
Resolution:
Fixed
The PAM user mapping plugin doesn't currently seem to log any information to /var/log/secure. It would probably be helpful if the plugin had some way to enable verbose logging during testing, so that it would be easier to debug configuration problems.
I expect the best way to implement this would be to create one or more module arguments for the plugin that controls logging. PAM module arguments are explained here:
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Managing_Smart_Cards/PAM_Configuration_Files.html#pam-mod-args
For example, maybe a configuration like this could enable very verbose debugging logging to /var/log/secure:
auth required pam_user_map.so debug
Or if we wanted the ability to specify a specific log, maybe we could do something like this:
auth required pam_user_map.so debug_log=/tmp/pam_user_map.log
But these are just suggestions.
relates to
MDEV-30384
Group mapping with pam_user_map does not work for ldap nested groups
Open
{"report":{"fcp":678.7999999523163,"ttfb":145.79999995231628,"pageVisibility":"visible","entityId":58181,"key":"jira.project.issue.view-issue","isInitial":true,"threshold":1000,"elementTimings":{},"userDeviceMemory":8,"userDeviceProcessors":64,"apdex":1,"journeyId":"32c49cc5-f992-402f-abba-364e564eef5b","navigationType":0,"readyForUser":739.2999999523163,"redirectCount":0,"resourceLoadedEnd":723.4000000953674,"resourceLoadedStart":151.20000004768372,"resourceTiming":[{"duration":6.3999998569488525,"initiatorType":"link","name":"https://jira.mariadb.org/s/2c21342762a6a02add1c328bed317ffd-CDN/lu2bu7/820016/12ta74/0a8bac35585be7fc6c9cc5a0464cd4cf/_/download/contextbatch/css/_super/batch.css","startTime":151.20000004768372,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":151.20000004768372,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":157.59999990463257,"responseStart":0,"secureConnectionStart":0},{"duration":7.700000047683716,"initiatorType":"link","name":"https://jira.mariadb.org/s/7ebd35e77e471bc30ff0eba799ebc151-CDN/lu2bu7/820016/12ta74/8679b4946efa1a0bb029a3a22206fb5d/_/download/contextbatch/css/jira.browse.project,project.issue.navigator,jira.view.issue,jira.general,jira.global,atl.general,-_super/batch.css?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&slack-enabled=true","startTime":151.5,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":151.5,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":159.20000004768372,"responseStart":0,"secureConnectionStart":0},{"duration":59.90000009536743,"initiatorType":"script","name":"https://jira.mariadb.org/s/fbf975c0cce4b1abf04784eeae9ba1f4-CDN/lu2bu7/820016/12ta74/0a8bac35585be7fc6c9cc5a0464cd4cf/_/download/contextbatch/js/_super/batch.js?locale=en","startTime":151.59999990463257,"connectEnd":151.59999990463257,"connectStart":151.59999990463257,"domainLookupEnd":151.59999990463257,"domainLookupStart":151.59999990463257,"fetchStart":151.59999990463257,"redirectEnd":0,"redirectStart":0,"requestStart":151.59999990463257,"responseEnd":211.5,"responseStart":211.5,"secureConnectionStart":151.59999990463257},{"duration":137.5,"initiatorType":"script","name":"https://jira.mariadb.org/s/099b33461394b8015fc36c0a4b96e19f-CDN/lu2bu7/820016/12ta74/8679b4946efa1a0bb029a3a22206fb5d/_/download/contextbatch/js/jira.browse.project,project.issue.navigator,jira.view.issue,jira.general,jira.global,atl.general,-_super/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&locale=en&slack-enabled=true","startTime":151.79999995231628,"connectEnd":151.79999995231628,"connectStart":151.79999995231628,"domainLookupEnd":151.79999995231628,"domainLookupStart":151.79999995231628,"fetchStart":151.79999995231628,"redirectEnd":0,"redirectStart":0,"requestStart":151.79999995231628,"responseEnd":289.2999999523163,"responseStart":289.2999999523163,"secureConnectionStart":151.79999995231628},{"duration":140.89999985694885,"initiatorType":"script","name":"https://jira.mariadb.org/s/94c15bff32baef80f4096a08aceae8bc-CDN/lu2bu7/820016/12ta74/c92c0caa9a024ae85b0ebdbed7fb4bd7/_/download/contextbatch/js/atl.global,-_super/batch.js?locale=en","startTime":151.90000009536743,"connectEnd":151.90000009536743,"connectStart":151.90000009536743,"domainLookupEnd":151.90000009536743,"domainLookupStart":151.90000009536743,"fetchStart":151.90000009536743,"redirectEnd":0,"redirectStart":0,"requestStart":151.90000009536743,"responseEnd":292.7999999523163,"responseStart":292.7999999523163,"secureConnectionStart":151.90000009536743},{"duration":141.5,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bu7/820016/12ta74/1.0/_/download/batch/jira.webresources:calendar-en/jira.webresources:calendar-en.js","startTime":151.90000009536743,"connectEnd":151.90000009536743,"connectStart":151.90000009536743,"domainLookupEnd":151.90000009536743,"domainLookupStart":151.90000009536743,"fetchStart":151.90000009536743,"redirectEnd":0,"redirectStart":0,"requestStart":151.90000009536743,"responseEnd":293.40000009536743,"responseStart":293.40000009536743,"secureConnectionStart":151.90000009536743},{"duration":141.79999995231628,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bu7/820016/12ta74/1.0/_/download/batch/jira.webresources:calendar-localisation-moment/jira.webresources:calendar-localisation-moment.js","startTime":152,"connectEnd":152,"connectStart":152,"domainLookupEnd":152,"domainLookupStart":152,"fetchStart":152,"redirectEnd":0,"redirectStart":0,"requestStart":152,"responseEnd":293.7999999523163,"responseStart":293.7999999523163,"secureConnectionStart":152},{"duration":142.10000014305115,"initiatorType":"link","name":"https://jira.mariadb.org/s/b04b06a02d1959df322d9cded3aeecc1-CDN/lu2bu7/820016/12ta74/a2ff6aa845ffc9a1d22fe23d9ee791fc/_/download/contextbatch/css/jira.global.look-and-feel,-_super/batch.css","startTime":152.09999990463257,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":152.09999990463257,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":294.2000000476837,"responseStart":0,"secureConnectionStart":0},{"duration":142.39999985694885,"initiatorType":"link","name":"https://jira.mariadb.org/s/3ac36323ba5e4eb0af2aa7ac7211b4bb-CDN/lu2bu7/820016/12ta74/d176f0986478cc64f24226b3d20c140d/_/download/contextbatch/css/com.atlassian.jira.projects.sidebar.init,-_super,-project.issue.navigator,-jira.view.issue/batch.css?jira.create.linked.issue=true","startTime":152.20000004768372,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":152.20000004768372,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":294.59999990463257,"responseStart":0,"secureConnectionStart":0},{"duration":142,"initiatorType":"script","name":"https://jira.mariadb.org/rest/api/1.0/shortcuts/820016/47140b6e0a9bc2e4913da06536125810/shortcuts.js?context=issuenavigation&context=issueaction","startTime":152.20000004768372,"connectEnd":152.20000004768372,"connectStart":152.20000004768372,"domainLookupEnd":152.20000004768372,"domainLookupStart":152.20000004768372,"fetchStart":152.20000004768372,"redirectEnd":0,"redirectStart":0,"requestStart":152.20000004768372,"responseEnd":294.2000000476837,"responseStart":294.2000000476837,"secureConnectionStart":152.20000004768372},{"duration":142.29999995231628,"initiatorType":"script","name":"https://jira.mariadb.org/s/3339d87fa2538a859872f2df449bf8d0-CDN/lu2bu7/820016/12ta74/d176f0986478cc64f24226b3d20c140d/_/download/contextbatch/js/com.atlassian.jira.projects.sidebar.init,-_super,-project.issue.navigator,-jira.view.issue/batch.js?jira.create.linked.issue=true&locale=en","startTime":152.5,"connectEnd":152.5,"connectStart":152.5,"domainLookupEnd":152.5,"domainLookupStart":152.5,"fetchStart":152.5,"redirectEnd":0,"redirectStart":0,"requestStart":152.5,"responseEnd":294.7999999523163,"responseStart":294.7999999523163,"secureConnectionStart":152.5},{"duration":407.30000019073486,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bu7/820016/12ta74/1.0/_/download/batch/jira.webresources:bigpipe-js/jira.webresources:bigpipe-js.js","startTime":153.09999990463257,"connectEnd":153.09999990463257,"connectStart":153.09999990463257,"domainLookupEnd":153.09999990463257,"domainLookupStart":153.09999990463257,"fetchStart":153.09999990463257,"redirectEnd":0,"redirectStart":0,"requestStart":153.09999990463257,"responseEnd":560.4000000953674,"responseStart":560.4000000953674,"secureConnectionStart":153.09999990463257},{"duration":424.40000009536743,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bu7/820016/12ta74/1.0/_/download/batch/jira.webresources:bigpipe-init/jira.webresources:bigpipe-init.js","startTime":153.09999990463257,"connectEnd":153.09999990463257,"connectStart":153.09999990463257,"domainLookupEnd":153.09999990463257,"domainLookupStart":153.09999990463257,"fetchStart":153.09999990463257,"redirectEnd":0,"redirectStart":0,"requestStart":153.09999990463257,"responseEnd":577.5,"responseStart":577.5,"secureConnectionStart":153.09999990463257},{"duration":138.89999985694885,"initiatorType":"xmlhttprequest","name":"https://jira.mariadb.org/rest/webResources/1.0/resources","startTime":426.40000009536743,"connectEnd":426.40000009536743,"connectStart":426.40000009536743,"domainLookupEnd":426.40000009536743,"domainLookupStart":426.40000009536743,"fetchStart":426.40000009536743,"redirectEnd":0,"redirectStart":0,"requestStart":426.40000009536743,"responseEnd":565.2999999523163,"responseStart":565.2999999523163,"secureConnectionStart":426.40000009536743},{"duration":80.09999990463257,"initiatorType":"link","name":"https://jira.mariadb.org/s/d5715adaadd168a9002b108b2b039b50-CDN/lu2bu7/820016/12ta74/be4b45e9cec53099498fa61c8b7acba4/_/download/contextbatch/css/jira.project.sidebar,-_super,-project.issue.navigator,-jira.general,-jira.browse.project,-jira.view.issue,-jira.global,-atl.general,-com.atlassian.jira.projects.sidebar.init/batch.css?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&slack-enabled=true","startTime":625.5,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":625.5,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":705.5999999046326,"responseStart":0,"secureConnectionStart":0},{"duration":91,"initiatorType":"link","name":"https://jira.mariadb.org/s/50bc9be5bfead1a25e72c1a9338c94f6-CDN/lu2bu7/820016/12ta74/e108c7645258ccb43280ed3404e3e949/_/download/contextbatch/css/com.atlassian.jira.plugins.jira-development-integration-plugin:0,-_super,-jira.view.issue,-jira.global,-jira.general,-jira.browse.project,-project.issue.navigator,-atl.general/batch.css?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&slack-enabled=true","startTime":625.9000000953674,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":625.9000000953674,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":716.9000000953674,"responseStart":0,"secureConnectionStart":0},{"duration":90.39999985694885,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bu7/820016/12ta74/e65b778d185daf5aee24936755b43da6/_/download/contextbatch/js/browser-metrics-plugin.contrib,-_super,-project.issue.navigator,-jira.view.issue,-atl.general/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&slack-enabled=true","startTime":626.7000000476837,"connectEnd":626.7000000476837,"connectStart":626.7000000476837,"domainLookupEnd":626.7000000476837,"domainLookupStart":626.7000000476837,"fetchStart":626.7000000476837,"redirectEnd":0,"redirectStart":0,"requestStart":626.7000000476837,"responseEnd":717.0999999046326,"responseStart":717.0999999046326,"secureConnectionStart":626.7000000476837},{"duration":94.90000009536743,"initiatorType":"script","name":"https://jira.mariadb.org/s/f51ef5507eea4c158f257c66c93b2a3f-CDN/lu2bu7/820016/12ta74/be4b45e9cec53099498fa61c8b7acba4/_/download/contextbatch/js/jira.project.sidebar,-_super,-project.issue.navigator,-jira.general,-jira.browse.project,-jira.view.issue,-jira.global,-atl.general,-com.atlassian.jira.projects.sidebar.init/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&locale=en&slack-enabled=true","startTime":627,"connectEnd":627,"connectStart":627,"domainLookupEnd":627,"domainLookupStart":627,"fetchStart":627,"redirectEnd":0,"redirectStart":0,"requestStart":627,"responseEnd":721.9000000953674,"responseStart":721.9000000953674,"secureConnectionStart":627},{"duration":96,"initiatorType":"script","name":"https://jira.mariadb.org/s/86ee9bbc76cd1bcd8556fcdcf46241c9-CDN/lu2bu7/820016/12ta74/e108c7645258ccb43280ed3404e3e949/_/download/contextbatch/js/com.atlassian.jira.plugins.jira-development-integration-plugin:0,-_super,-jira.view.issue,-jira.global,-jira.general,-jira.browse.project,-project.issue.navigator,-atl.general/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&locale=en&slack-enabled=true","startTime":627.4000000953674,"connectEnd":627.4000000953674,"connectStart":627.4000000953674,"domainLookupEnd":627.4000000953674,"domainLookupStart":627.4000000953674,"fetchStart":627.4000000953674,"redirectEnd":0,"redirectStart":0,"requestStart":627.4000000953674,"responseEnd":723.4000000953674,"responseStart":723.4000000953674,"secureConnectionStart":627.4000000953674},{"duration":91.10000014305115,"initiatorType":"script","name":"https://www.google-analytics.com/analytics.js","startTime":658.7999999523163,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":658.7999999523163,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":749.9000000953674,"responseStart":0,"secureConnectionStart":0}],"fetchStart":0,"domainLookupStart":0,"domainLookupEnd":0,"connectStart":0,"connectEnd":0,"requestStart":17,"responseStart":146,"responseEnd":147,"domLoading":149,"domInteractive":807,"domContentLoadedEventStart":807,"domContentLoadedEventEnd":852,"domComplete":1075,"loadEventStart":1075,"loadEventEnd":1076,"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","marks":[{"name":"bigPipe.sidebar-id.start","time":772.9000000953674},{"name":"bigPipe.sidebar-id.end","time":773.5999999046326},{"name":"bigPipe.activity-panel-pipe-id.start","time":773.7999999523163},{"name":"bigPipe.activity-panel-pipe-id.end","time":775.0999999046326},{"name":"activityTabFullyLoaded","time":867}],"measures":[],"correlationId":"59349e3e66c650","effectiveType":"4g","downlink":9.4,"rtt":0,"serverDuration":77,"dbReadsTimeInMs":10,"dbConnsTimeInMs":17,"applicationHash":"9d11dbea5f4be3d4cc21f03a88dd11d8c8687422","experiments":[]}}
Do we have plans to implement this at some point? Problems with pam_user_map.so are currently very difficult to debug.