Details
-
Bug
-
Status: Closed (View Workflow)
-
Major
-
Resolution: Fixed
-
5.5.42, 10.0(EOL)
-
Centos 6.6 x86_64
Description
rpms involved
pam_ldap-185-11.el6.x86_64
|
pam_mysql-0.7-0.12.rc1.el6.x86_64
|
pam-1.1.1-20.el6.x86_64
|
MariaDB
MariaDB-compat-5.5.42-1.el6.x86_64
|
MariaDB-client-5.5.42-1.el6.x86_64
|
MariaDB-common-5.5.42-1.el6.x86_64
|
MariaDB-shared-5.5.42-1.el6.x86_64
|
MariaDB-server-5.5.42-1.el6.x86_64
|
I've created the user in MariaDB and loaded the auth module with
INSTALL SONAME 'auth_pam'; |
create user <myldapusername>@localhost IDENTIFIED VIA pam USING 'mariadb'; |
cat /etc/pam.d/mariadb
|
#%PAM-1.0
|
auth sufficient pam_ldap.so debug
|
account sufficient pam_ldap.so debug
|
account sufficient pam_localuser.so
|
And a valid /etc/pam_ldap.conf
If I use setenforce Permissive all is well, I can log in as the user authenticated via the ldap AD.
If I use setenforce Enforcing I see
> mysqld: PAM audit_open() failed: Permission denied
I've verified that the selinux permissions on the /etc/pam.d/mariadb appear to be valid
Cheers
Jan.
Attachments
Issue Links
- links to