Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-19879

server can send empty error message to client with pam_use_cleartext_plugin

    XMLWordPrintable

Details

    • Bug
    • Status: Closed (View Workflow)
    • Major
    • Resolution: Fixed
    • 10.2.25, 10.1.40, 10.3.16, 10.4.6
    • 10.4.7
    • Plugin - pam
    • None

    Description

      If pam_use_cleartext_plugin is configured on the server, and if you have an error in your PAM service configuration, similar to the following:

      $ cat /etc/pam.d/mariadb
      		 
      auth required pam_unix.so audit
      		 
      auth required pam_unix.so audit

      Then the client receives an empty error message if you try to use PAM authentication:

      $ mysql -u alice --plugin-dir=/usr/lib64/mysql/plugin
      		 
      ERROR:

      Attachments

        Issue Links

          relates to

          Bug - A problem which impairs or prevents the functions of the product. MDEV-19880 pam v1: pam password authentication doesn't work at all in MariaDB 10.4

          • Major - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. MDEV-19881 pam plugin from MariaDB 10.3 doesn't work with MariaDB 10.4

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Open

          Bug - A problem which impairs or prevents the functions of the product. MDEV-19876 pam v2: auth_pam_tool_dir and auth_pam_tool permissions are wrong in RPMs

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MDEV-19877 pam v2: auth_pam_tool input format is not user friendly for debugging

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Open

          Bug - A problem which impairs or prevents the functions of the product. MDEV-19878 pam v2: pam password authentication doesn't work at all

          • Major - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. MDEV-19882 pam v2: auth_pam_tool truncates passwords that are not null-terminated

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. MDEV-19898 PAM plugin testing

          • Major - Major loss of function.
          • Stalled

          Activity

            People

              serg Sergei Golubchik
              GeoffMontee Geoff Montee (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.