ALTER USER IDENTIFIED WITH ‘auth_pam’ disables user account
Affects | Status | Importance | Assigned to | Milestone | ||
---|---|---|---|---|---|---|
MySQL Server |
Unknown
|
Unknown
|
||||
Percona Server moved to https://jira.percona.com/projects/PS | Status tracked in 5.7 | |||||
5.1 |
Invalid
|
Undecided
|
Unassigned | |||
5.5 |
Invalid
|
Undecided
|
Unassigned | |||
5.6 |
Invalid
|
Undecided
|
Unassigned | |||
5.7 |
Fix Released
|
Medium
|
Unassigned |
Bug Description
When we alter user with auth_pam plugin, server disables the user account. Need to update the mysql.user manually to enable the account. This is an expected behavior as per mysql document.
https:/
mysql> create user mytest@localhost;
Query OK, 0 rows affected (0.00 sec)
mysql> select user,host,
+------
| user | host | plugin | password_expired |
+------
| mytest | localhost | mysql_native_
+------
1 row in set (0.00 sec)
mysql> ALTER USER mytest@localhost IDENTIFIED WITH auth_pam;
Query OK, 0 rows affected (0.00 sec)
mysql> select user,host,
+------
| user | host | plugin | password_expired |
+------
| mytest | localhost | auth_pam | Y |
+------
1 row in set (0.00 sec)
mysql>
Please add following note in PAM plugin document
" ALTER USER IDENTIFIED WITH ‘auth_pam’ actually disables the account and the only way to fix it is to manually update `mysql.user`"
https:/
tags: | added: qa57 |
This is suspicious: please provide a quote in https:/ /dev.mysql. com/doc/ refman/ 5.7/en/ alter-user. html concerning manual mysql.user updating.