Type:
Task
Priority:
Major
Resolution:
Fixed
Some PAM modules, such as pam_winbind, automatically "normalize" usernames to all lower case characters. For example, see this log snippet from the comments of MDEV-18651 :
Feb 21 19:02:20 mariadev1 mysqld: pam_unix(password-auth:auth): authentication failure; logname= uid=502 euid=502 tty= ruser= rhost= user=JohnD
Feb 21 19:02:20 mariadev1 mysqld: pam_winbind(password-auth:auth): Verify user 'JohnD'
Feb 21 19:02:20 mariadev1 mysqld: pam_winbind(password-auth:auth): user 'JohnD' granted access
Feb 21 19:02:20 mariadev1 mysqld: pam_winbind(password-auth:auth): Returned user was 'johnd'
Feb 21 19:02:20 mariadev1 mysqld: pam_winbind(password-auth:account): user 'johnd' granted access
It might be worthwhile to add an option to the PAM authentication plugin to allow case insensitive username matching in cases like this.
For example, let's say that we have an option called pam_case_insensitive_usernames. Then, if this option were enabled, and if a user logged in with the "DBA" PAM user, and if the PAM module "normalized" this user name to "dba", then the PAM authentication plugin would still allow authentication to succeed, even if the MariaDB user had the name "DBA".
relates to
MDEV-18651
PAM authentication forces lowercase.
Closed
{"report":{"fcp":634.2999999523163,"ttfb":148.09999990463257,"pageVisibility":"visible","entityId":72773,"key":"jira.project.issue.view-issue","isInitial":true,"threshold":1000,"elementTimings":{},"userDeviceMemory":8,"userDeviceProcessors":64,"apdex":1,"journeyId":"7b4d4d0e-abff-4cb9-8aee-0035382fa6db","navigationType":0,"readyForUser":702.7000000476837,"redirectCount":0,"resourceLoadedEnd":866.5,"resourceLoadedStart":153.5,"resourceTiming":[{"duration":14.799999952316284,"initiatorType":"link","name":"https://jira.mariadb.org/s/2c21342762a6a02add1c328bed317ffd-CDN/lu2bu7/820016/12ta74/0a8bac35585be7fc6c9cc5a0464cd4cf/_/download/contextbatch/css/_super/batch.css","startTime":153.5,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":153.5,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":168.29999995231628,"responseStart":0,"secureConnectionStart":0},{"duration":15.400000095367432,"initiatorType":"link","name":"https://jira.mariadb.org/s/7ebd35e77e471bc30ff0eba799ebc151-CDN/lu2bu7/820016/12ta74/8679b4946efa1a0bb029a3a22206fb5d/_/download/contextbatch/css/jira.browse.project,project.issue.navigator,jira.view.issue,jira.general,jira.global,atl.general,-_super/batch.css?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&slack-enabled=true","startTime":153.79999995231628,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":153.79999995231628,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":169.20000004768372,"responseStart":0,"secureConnectionStart":0},{"duration":74.30000019073486,"initiatorType":"script","name":"https://jira.mariadb.org/s/fbf975c0cce4b1abf04784eeae9ba1f4-CDN/lu2bu7/820016/12ta74/0a8bac35585be7fc6c9cc5a0464cd4cf/_/download/contextbatch/js/_super/batch.js?locale=en","startTime":153.89999985694885,"connectEnd":153.89999985694885,"connectStart":153.89999985694885,"domainLookupEnd":153.89999985694885,"domainLookupStart":153.89999985694885,"fetchStart":153.89999985694885,"redirectEnd":0,"redirectStart":0,"requestStart":153.89999985694885,"responseEnd":228.20000004768372,"responseStart":228.09999990463257,"secureConnectionStart":153.89999985694885},{"duration":170.40000009536743,"initiatorType":"script","name":"https://jira.mariadb.org/s/099b33461394b8015fc36c0a4b96e19f-CDN/lu2bu7/820016/12ta74/8679b4946efa1a0bb029a3a22206fb5d/_/download/contextbatch/js/jira.browse.project,project.issue.navigator,jira.view.issue,jira.general,jira.global,atl.general,-_super/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&locale=en&slack-enabled=true","startTime":154.09999990463257,"connectEnd":154.09999990463257,"connectStart":154.09999990463257,"domainLookupEnd":154.09999990463257,"domainLookupStart":154.09999990463257,"fetchStart":154.09999990463257,"redirectEnd":0,"redirectStart":0,"requestStart":154.09999990463257,"responseEnd":324.5,"responseStart":324.5,"secureConnectionStart":154.09999990463257},{"duration":174.09999990463257,"initiatorType":"script","name":"https://jira.mariadb.org/s/94c15bff32baef80f4096a08aceae8bc-CDN/lu2bu7/820016/12ta74/c92c0caa9a024ae85b0ebdbed7fb4bd7/_/download/contextbatch/js/atl.global,-_super/batch.js?locale=en","startTime":154.20000004768372,"connectEnd":154.20000004768372,"connectStart":154.20000004768372,"domainLookupEnd":154.20000004768372,"domainLookupStart":154.20000004768372,"fetchStart":154.20000004768372,"redirectEnd":0,"redirectStart":0,"requestStart":154.20000004768372,"responseEnd":328.2999999523163,"responseStart":328.2999999523163,"secureConnectionStart":154.20000004768372},{"duration":174.40000009536743,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bu7/820016/12ta74/1.0/_/download/batch/jira.webresources:calendar-en/jira.webresources:calendar-en.js","startTime":154.29999995231628,"connectEnd":154.29999995231628,"connectStart":154.29999995231628,"domainLookupEnd":154.29999995231628,"domainLookupStart":154.29999995231628,"fetchStart":154.29999995231628,"redirectEnd":0,"redirectStart":0,"requestStart":154.29999995231628,"responseEnd":328.7000000476837,"responseStart":328.7000000476837,"secureConnectionStart":154.29999995231628},{"duration":174.79999995231628,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bu7/820016/12ta74/1.0/_/download/batch/jira.webresources:calendar-localisation-moment/jira.webresources:calendar-localisation-moment.js","startTime":154.29999995231628,"connectEnd":154.29999995231628,"connectStart":154.29999995231628,"domainLookupEnd":154.29999995231628,"domainLookupStart":154.29999995231628,"fetchStart":154.29999995231628,"redirectEnd":0,"redirectStart":0,"requestStart":154.29999995231628,"responseEnd":329.09999990463257,"responseStart":329.09999990463257,"secureConnectionStart":154.29999995231628},{"duration":175.20000004768372,"initiatorType":"link","name":"https://jira.mariadb.org/s/b04b06a02d1959df322d9cded3aeecc1-CDN/lu2bu7/820016/12ta74/a2ff6aa845ffc9a1d22fe23d9ee791fc/_/download/contextbatch/css/jira.global.look-and-feel,-_super/batch.css","startTime":154.5,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":154.5,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":329.7000000476837,"responseStart":0,"secureConnectionStart":0},{"duration":175.19999980926514,"initiatorType":"link","name":"https://jira.mariadb.org/s/3ac36323ba5e4eb0af2aa7ac7211b4bb-CDN/lu2bu7/820016/12ta74/d176f0986478cc64f24226b3d20c140d/_/download/contextbatch/css/com.atlassian.jira.projects.sidebar.init,-_super,-project.issue.navigator,-jira.view.issue/batch.css?jira.create.linked.issue=true","startTime":154.70000004768372,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":154.70000004768372,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":329.89999985694885,"responseStart":0,"secureConnectionStart":0},{"duration":174.79999995231628,"initiatorType":"script","name":"https://jira.mariadb.org/rest/api/1.0/shortcuts/820016/47140b6e0a9bc2e4913da06536125810/shortcuts.js?context=issuenavigation&context=issueaction","startTime":154.70000004768372,"connectEnd":154.70000004768372,"connectStart":154.70000004768372,"domainLookupEnd":154.70000004768372,"domainLookupStart":154.70000004768372,"fetchStart":154.70000004768372,"redirectEnd":0,"redirectStart":0,"requestStart":154.70000004768372,"responseEnd":329.5,"responseStart":329.5,"secureConnectionStart":154.70000004768372},{"duration":175.20000004768372,"initiatorType":"script","name":"https://jira.mariadb.org/s/3339d87fa2538a859872f2df449bf8d0-CDN/lu2bu7/820016/12ta74/d176f0986478cc64f24226b3d20c140d/_/download/contextbatch/js/com.atlassian.jira.projects.sidebar.init,-_super,-project.issue.navigator,-jira.view.issue/batch.js?jira.create.linked.issue=true&locale=en","startTime":154.89999985694885,"connectEnd":154.89999985694885,"connectStart":154.89999985694885,"domainLookupEnd":154.89999985694885,"domainLookupStart":154.89999985694885,"fetchStart":154.89999985694885,"redirectEnd":0,"redirectStart":0,"requestStart":154.89999985694885,"responseEnd":330.09999990463257,"responseStart":330.09999990463257,"secureConnectionStart":154.89999985694885},{"duration":642.7000000476837,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bu7/820016/12ta74/1.0/_/download/batch/jira.webresources:bigpipe-js/jira.webresources:bigpipe-js.js","startTime":155.59999990463257,"connectEnd":155.59999990463257,"connectStart":155.59999990463257,"domainLookupEnd":155.59999990463257,"domainLookupStart":155.59999990463257,"fetchStart":155.59999990463257,"redirectEnd":0,"redirectStart":0,"requestStart":155.59999990463257,"responseEnd":798.2999999523163,"responseStart":798.2999999523163,"secureConnectionStart":155.59999990463257},{"duration":643.6999998092651,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bu7/820016/12ta74/1.0/_/download/batch/jira.webresources:bigpipe-init/jira.webresources:bigpipe-init.js","startTime":155.70000004768372,"connectEnd":155.70000004768372,"connectStart":155.70000004768372,"domainLookupEnd":155.70000004768372,"domainLookupStart":155.70000004768372,"fetchStart":155.70000004768372,"redirectEnd":0,"redirectStart":0,"requestStart":155.70000004768372,"responseEnd":799.3999998569489,"responseStart":799.3999998569489,"secureConnectionStart":155.70000004768372},{"duration":417.5,"initiatorType":"xmlhttprequest","name":"https://jira.mariadb.org/rest/webResources/1.0/resources","startTime":381.09999990463257,"connectEnd":381.09999990463257,"connectStart":381.09999990463257,"domainLookupEnd":381.09999990463257,"domainLookupStart":381.09999990463257,"fetchStart":381.09999990463257,"redirectEnd":0,"redirectStart":0,"requestStart":381.09999990463257,"responseEnd":798.5999999046326,"responseStart":798.5999999046326,"secureConnectionStart":381.09999990463257},{"duration":172.80000019073486,"initiatorType":"script","name":"https://www.google-analytics.com/analytics.js","startTime":627.3999998569489,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":627.3999998569489,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":800.2000000476837,"responseStart":0,"secureConnectionStart":0},{"duration":48,"initiatorType":"link","name":"https://jira.mariadb.org/s/d5715adaadd168a9002b108b2b039b50-CDN/lu2bu7/820016/12ta74/be4b45e9cec53099498fa61c8b7acba4/_/download/contextbatch/css/jira.project.sidebar,-_super,-project.issue.navigator,-jira.general,-jira.browse.project,-jira.view.issue,-jira.global,-atl.general,-com.atlassian.jira.projects.sidebar.init/batch.css?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&slack-enabled=true","startTime":804.0999999046326,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":804.0999999046326,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":852.0999999046326,"responseStart":0,"secureConnectionStart":0},{"duration":48.700000047683716,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bu7/820016/12ta74/e65b778d185daf5aee24936755b43da6/_/download/contextbatch/js/browser-metrics-plugin.contrib,-_super,-project.issue.navigator,-jira.view.issue,-atl.general/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&slack-enabled=true","startTime":804.8999998569489,"connectEnd":804.8999998569489,"connectStart":804.8999998569489,"domainLookupEnd":804.8999998569489,"domainLookupStart":804.8999998569489,"fetchStart":804.8999998569489,"redirectEnd":0,"redirectStart":0,"requestStart":804.8999998569489,"responseEnd":853.5999999046326,"responseStart":853.5999999046326,"secureConnectionStart":804.8999998569489},{"duration":61.10000014305115,"initiatorType":"script","name":"https://jira.mariadb.org/s/f51ef5507eea4c158f257c66c93b2a3f-CDN/lu2bu7/820016/12ta74/be4b45e9cec53099498fa61c8b7acba4/_/download/contextbatch/js/jira.project.sidebar,-_super,-project.issue.navigator,-jira.general,-jira.browse.project,-jira.view.issue,-jira.global,-atl.general,-com.atlassian.jira.projects.sidebar.init/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&locale=en&slack-enabled=true","startTime":805.3999998569489,"connectEnd":805.3999998569489,"connectStart":805.3999998569489,"domainLookupEnd":805.3999998569489,"domainLookupStart":805.3999998569489,"fetchStart":805.3999998569489,"redirectEnd":0,"redirectStart":0,"requestStart":805.3999998569489,"responseEnd":866.5,"responseStart":866.5,"secureConnectionStart":805.3999998569489}],"fetchStart":0,"domainLookupStart":0,"domainLookupEnd":0,"connectStart":0,"connectEnd":0,"requestStart":32,"responseStart":148,"responseEnd":151,"domLoading":151,"domInteractive":880,"domContentLoadedEventStart":880,"domContentLoadedEventEnd":920,"domComplete":975,"loadEventStart":975,"loadEventEnd":976,"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","marks":[{"name":"bigPipe.sidebar-id.start","time":858.5},{"name":"bigPipe.sidebar-id.end","time":859.3999998569489},{"name":"bigPipe.activity-panel-pipe-id.start","time":859.5},{"name":"bigPipe.activity-panel-pipe-id.end","time":860.3999998569489},{"name":"activityTabFullyLoaded","time":937.8999998569489}],"measures":[],"correlationId":"d4409cb0cd6b23","effectiveType":"4g","downlink":9.7,"rtt":0,"serverDuration":67,"dbReadsTimeInMs":10,"dbConnsTimeInMs":16,"applicationHash":"9d11dbea5f4be3d4cc21f03a88dd11d8c8687422","experiments":[]}}
added an option --pam-winbind-workaround