MySQL Workbench 6.0.6 PAM Auth Fails

[Jervin R]

Description:
When connecting to server with PAM authentication enabled - testing the connection works fine but trying to actually use the new connection i.e. double click from the list returns an access denied error.

Below is the log from PAM when access denied:

Aug 24 00:59:21 centos6 mysqld: pam_warn(mysqld:auth): function=[pam_sm_authenticate] service=[mysqld] terminal=[<unknown>] user=[apc_user] ruser=[apc_user] rhost=[localhost]
Aug 24 00:59:21 centos6 unix_chkpwd[12538]: password check failed for user (apc_user)
Aug 24 00:59:21 centos6 mysqld: pam_unix(mysqld:auth): authentication failure; logname= uid=497 euid=497 tty= ruser=apc_user rhost=localhost user=apc_user

And is when I only do connection test:

Aug 24 01:00:35 centos6 mysqld: pam_warn(mysqld:auth): function=[pam_sm_authenticate] service=[mysqld] terminal=[<unknown>] user=[apc_user] ruser=[apc_user] rhost=[localhost]

Note this is tested only with Percona Server with its auth_pam_compat that is meant to be compatible with the one that comes with enterprise subscription from Oracle. So this may be Percona Server specific as well, I hope Oracle can verify if this is or not a bug with Workbench.

Percona Server 5.5.32 on Linux, WB 6.0.6 on Windows 7 x64

How to repeat:
1. Follow this procedure for the apc_user http://www.mysqlperformanceblog.com/2013/08/14/getting-percona-pam-to-work-with-percona-se...
2. Setup a connection on WB make sure to toggle enable cleartext authentication under Advanced tab.

Reported upstream to verify whether this is WB specific http://bugs.mysql.com/bug.php?id=70142

[Laurynas Biveinis (laurynas-biveinis)]

Does it work with any older MySQL Workbench version?

[Jervin R (revin)]

@Laurynas,

I've tested this on 6.0.6 and first GA 6.0.2, same behavior - older version that this does not support loading the cleartext plugin yet.

[Laurynas Biveinis (laurynas-biveinis)]

What about older major versions? 5.x?

[Jervin R (revin)]

@Laurynas, older versions then 6.x of WB have no support for cleartext plugin.

[Roel Van de Paar (roel11)]

Upstream bug report status: Can't repeat

[Valerii Kravchuk (valerii-kravchuk)]

Last comment in upstream bug says that this is repatable with WB 6.0.7 and Percona Server 5.5.33 (probably).

[Nilnandan Joshi (nilnandan-joshi)]

I have tested with WB 6.0.9 , Ubuntu 13.04 and PS 5.5.35. Its working for me. I can able to add, save and test connection, also connect to mysql with enable cleartext authentication under Advanced tab. (by double clicking)

[Nilnandan Joshi (nilnandan-joshi)]

It is working for me with WB 6.0.9 , Ubuntu 13.04 and PS 5.6.15 too.