Details
-
Task
-
Status: Closed (View Workflow)
-
Minor
-
Resolution: Fixed
-
23.08.1
-
None
Description
Currently, the pam_get_item(pam_handle, PAM_USER, ...) function call is only ran if mapping is enabled in MaxScale settings. If mapping is enabled, the account is not checked. MariaDB Server always checks both. This means that pam authentication can give different results between MaxScale and Server (most likely when one username is mapped to another and the new user does not exist).
Change MaxScale to match the Server in this respect. Some differences should remain: the new username is only taken into use if mapping is enabled in settings. This way, by default, MaxScale will attempt to log in to server with the original username and server will do the same transformation as MaxScale.