PAM auth fails in client without server package
Affects | Status | Importance | Assigned to | Milestone | ||
---|---|---|---|---|---|---|
Percona Server moved to https://jira.percona.com/projects/PS | Status tracked in 5.7 | |||||
5.1 |
Invalid
|
Undecided
|
Unassigned | |||
5.5 |
Triaged
|
High
|
Unassigned | |||
5.6 |
Triaged
|
High
|
Unassigned | |||
5.7 |
Triaged
|
High
|
Unassigned | |||
Ubuntu |
Invalid
|
Undecided
|
Unassigned |
Bug Description
If using PAM authentication on a server, and using a client with just the Percona client installed authentication fails:
[root@client sources.list.d]# mysql -u adavies -p -h servername
Enter password:
ERROR 2059 (HY000): Authentication plugin 'dialog' cannot be loaded: /usr/lib/
Sure enough, this file is only included with the Server rather than client:
[root@server ~]# dpkg -S /usr/lib/
percona-
This isnt an error on the server as when clients with the server package installed connect they work, and strace shows the client attempting to read that file:
[root@client sources.list.d]# strace mysql -u adavies -h server -pxx 2>&1 | grep -i --color dialog
read(3, "\23\0\
open("/
write(2, ": Authentication plugin 'dialog'"..., 142: Authentication plugin 'dialog' cannot be loaded: /usr/lib/
This is using the Ubuntu 10.04 packages from the Percona repo.
This appears to be a packaging bug: it seems to me that the plugin dialog.so should be included with the client package (or the common package).
Same applies to RPMs from Percona. On CentOS 6.4 dialog.so is included into Percona- Server- server- 55, but not to Percona- Server- client- 55 or Percona- Server- shared- 55 (I've checked with 5.5.31- rel30.3. 520).