mirror of
https://github.com/MariaDB/server.git
synced 2025-11-03 14:33:32 +03:00
9ca3571cb8
add a new option --pam-windbind-workaround for a pam plugin to work around pam_winbind unconditional username lowercasing
46 lines
1.1 KiB
Plaintext
46 lines
1.1 KiB
Plaintext
install plugin pam soname 'auth_pam.so';
|
|
create user test_pam identified via pam using 'mariadb_mtr';
|
|
create user pam_test;
|
|
grant proxy on pam_test to test_pam;
|
|
#
|
|
# athentication is successful, challenge/pin are ok
|
|
# note that current_user() differs from user()
|
|
#
|
|
Challenge input first.
|
|
Enter: not very secret challenge
|
|
Now, the magic number!
|
|
PIN: ****
|
|
select user(), current_user(), database();
|
|
user() current_user() database()
|
|
test_pam@localhost pam_test@% test
|
|
#
|
|
# athentication is unsuccessful
|
|
#
|
|
Challenge input first.
|
|
Enter: not very secret challenge
|
|
Now, the magic number!
|
|
PIN: ****
|
|
drop user test_pam;
|
|
drop user pam_test;
|
|
create user PAM_TEST identified via pam using 'mariadb_mtr';
|
|
#
|
|
# athentication is unsuccessful
|
|
#
|
|
Challenge input first.
|
|
Enter: not very secret challenge
|
|
Now, the magic number!
|
|
PIN: ****
|
|
set global pam_winbind_workaround=1;
|
|
#
|
|
# athentication is successful
|
|
#
|
|
Challenge input first.
|
|
Enter: not very secret challenge
|
|
Now, the magic number!
|
|
PIN: ****
|
|
select user(), current_user(), database();
|
|
user() current_user() database()
|
|
PAM_TEST@localhost PAM_TEST@% test
|
|
drop user PAM_TEST;
|
|
uninstall plugin pam;
|