maria-discuss team mailing list archive

[Sergei Golubchik <serg@xxxxxxxxxxx>]

Hi, Adam!

On Jan 19, Adam Balgach wrote:
> Hello –
> 
> I am having an issue configuring openLDAP to authenticate users on an
> instance in RHEL (CentOS 7)
> 
> MariaDB server
> 
> configured with plugin-load=auth_pam.so
> 
> in my /etc/pam.d/mysql:
> auth required pam_ldap.so
> account required pam_ldap.so
> 
> when I try and access the server from either the localhost, or any server
> inside my internal network, I see the LDAP authentication happen without
> issue and login is fine.
> 
> When I try and access the server from outside the network, on the mariadb
> server in /var/log/secure I see the following:
> 
> Jan 19 08:32:35 mysqld: pam_ldap(mysql:auth): unexpected response from failed conversation function
> Jan 19 08:32:35 mysqld: pam_ldap(mysql:auth): conversation failed
> Jan 19 08:32:35 mysqld: pam_ldap(mysql:auth): failed to get password: Authentication token manipulation error
> 
> And in my client (Cygwin) I get the following error:
> 
> ERROR 2059 (HY000): Authentication plugin 'mysql_clear_password' cannot be
> loaded: No such file or directory
> 
> However I see this plugin in the /usr/lib64/mysql/plugin directory

Do you see it on the server or on the client?

It is a client plugin, it must be stored on the client side and loaded
run-time by your client.

Regards,
Sergei
Chief Architect MariaDB
and security@xxxxxxxxxxx