[MDEV-5737] Mariadb cluster does not ship pam authentication module Created: 2014-02-25  Updated: 2014-02-26  Due: 2014-03-26  Resolved: 2014-02-26

Status: Closed
Project: MariaDB Server
Component/s: None
Affects Version/s: 5.5.33a
Fix Version/s: None

Type: Bug Priority: Minor
Reporter: Christian McHugh Assignee: Unassigned
Resolution: Not a Bug Votes: 0
Labels: None


 Description   

After installing mariadb-galera-server I do not appear to have the pam auth plugin.

Here are the only authentication plugins available:

mysql_native_password ACTIVE AUTHENTICATION NULL GPL
mysql_old_password ACTIVE AUTHENTICATION NULL GPL


 Comments   
Comment by Sergei Golubchik [ 2014-02-26 ]

how did you install mariadb-galera-server? Did you use apt-get?

Comment by Christian McHugh [ 2014-02-26 ]

Yep!

  1. dpkg -l |grep maria
    ii libmariadbclient18 5.5.34+maria-1~wheezy MariaDB database client library
    ii libmysqlclient18 5.5.34+maria-1~wheezy Virtual package to satisfy external depends
    ii mariadb-client-5.5 5.5.34+maria-1~wheezy MariaDB database client binaries
    ii mariadb-client-core-5.5 5.5.34+maria-1~wheezy MariaDB database core client binaries
    ii mariadb-common 5.5.34+maria-1~wheezy MariaDB database common files (e.g. /etc/mysql/conf.d/mariadb.cnf)
    ii mariadb-galera-server 5.5.33a+maria-1~wheezy MariaDB database server with Galera cluster
    ii mariadb-galera-server-5.5 5.5.33a+maria-1~wheezy MariaDB database server with Galera cluster binaries
    ii mysql-common 5.5.34+maria-1~wheezy MariaDB database common files (e.g. /etc/mysql/my.cnf)
  1. cat /etc/apt/sources.list.d/mariadb.list
    deb http://ftp.osuosl.org/pub/mariadb/repo/5.5/debian wheezy main
Comment by Elena Stepanova [ 2014-02-26 ]

The module is shipped, but as the most of plugins it is a separate library. To enable it, run INSTALL SONAME 'auth_pam'.

If it does not work, please comment to re-open the bug and provide information about your OS/architecture.

Comment by Christian McHugh [ 2014-02-26 ]

Oh man! You are right. Install soname loaded it right up.

I don't see in the documentation a way to specify these commands in my.cnf. Is that possible? It looks like --plugin-load auth_pam, could be passed to the mysqld process at startup, but on debian these options are not user editable without modifying, and thus customizing, the init script script.

Comment by Elena Stepanova [ 2014-02-26 ]

If you ran INSTALL SONAME, you don't need to re-load the plugin on each server startup, it will stay there until you unload it (or until the library is removed from the file system).
Otherwise, yes, plugin-load (or plugin-load-add) is the solution, you should add it to my.cnf
plugin-load=auth_pam

Generated at Thu Feb 08 07:06:41 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.