← Back to team overview

maria-discuss team mailing list archive

Re: pam / ldap auth



On 09/25/2018 12:56 PM, Sergei Golubchik wrote:
pam_user_map renames the user in the pam module chain, that is, all
following pam modules will see the new name. And because 'account'
modules are invoked after 'auth', pam_winbind will see the new name.

Do you really have to use

  account required pam_winbind.so

line? I didn't try it myself, but I'd think that using

  account required pam_permit.so

would help. That's what we're using to test MariaDB pam plugin
in mysql-test framework.

It does help, yes. So I guess I didn't need the line :-)

I have everything I need working now.

Thanks Sergei, great help!