Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-17118

unknown option --pam-use-cleartext-plugin

Details

    Description

      I am trying tu use the PAM authentication plugin with my MariaDb server.
      I followed these instructions and everything works fine, except the fact that I can't connect from PHP, and especially from phpMyAdmin:

       mysqli_real_connect(): The server requested authentication method unknown to the client [dialog]
       mysqli_real_connect(): (HY000/2054): The server requested authentication method unknown to the client
      

      I think that the --pam_use_cleartext_plugin option would correct this error in disabling the dialog authentication plugin for PAM from what I understood of the docs : https://mariadb.com/kb/en/library/authentication-plugin-pam/#mysql-cleartext-plugin

      But I get:
      mysql: unknown option '--pam_use_cleartext_plugin':

      nicolas@club1:~$ mysql --pam_use_cleartext_plugin
      mysql: unknown option '--pam_use_cleartext_plugin'
      nicolas@club1:~$ mysql
      [mariadb] Password:
      Welcome to the MariaDB monitor.  Commands end with ; or \g.
      Your MariaDB connection id is 76
      Server version: 10.3.9-MariaDB-1:10.3.9+maria~bionic mariadb.org binary distribution
       
      Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.
       
      Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
       
      MariaDB [(none)]>
      

      What am I doing wrong ?

      Attachments

        Activity

          PAM plugin is a server plugin that instructs the client to use the dialog or a mysql_cleartext_password plugin.

          The manual says

          one can instruct the PAM plugin to use the mysql_cleartext_password client plugin instead of the dialog plugin

          Because PAM is the server plugin, you need to use --pam-use-cleartext-plugin on the server, not on the client.

          serg Sergei Golubchik added a comment - PAM plugin is a server plugin that instructs the client to use the dialog or a mysql_cleartext_password plugin. The manual says one can instruct the PAM plugin to use the mysql_cleartext_password client plugin instead of the dialog plugin Because PAM is the server plugin, you need to use --pam-use-cleartext-plugin on the server, not on the client.

          Thank you very much, I really thought it was a client option to ask the server to use cleartext instead of dialog.
          So I added this config and restarted the server and now everything works as expected.

          [mysqld]
          pam_use_cleartext_plugin = ON
          

          n-peugnet Nicolas Peugnet added a comment - Thank you very much, I really thought it was a client option to ask the server to use cleartext instead of dialog. So I added this config and restarted the server and now everything works as expected. [mysqld] pam_use_cleartext_plugin = ON

          People

            serg Sergei Golubchik
            n-peugnet Nicolas Peugnet
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.