Excerpts from Daniel Nichter's message of Fri Jul 01 00:15:47 +0100 2011: > Le 30 juin 2011 à 16:43, Olaf van der Spek a écrit : > > On Fri, Jul 1, 2011 at 12:23 AM, Daniel Nichter <[email protected]> wrote: > >> I just recompiled Drizzle from trunk (a day or two ago) on Ubuntu 10 and > >> it still does not work. I'm approaching this from the user's point of > >> view so I expect that it "just works" after --plugin-add auth_pam and > >> drizzle --user daniel --password. The plugin is not documented so I'm out > >> of troubleshooting resources. :-) > > > > What do you expect the password to be validated against? The system account? > > > My understanding is that auth-pam is the same thing as system accounts. So > if I log into my box with user=daniel password=foo, then drizzle > --user=daniel --password=foo should work too. On other machines I checked > that libpam is working ok and did other various tests that indicated that > drizzle was not working (verses ilbpam or something else not working).
PAM is pluggable authentication modules. It is not the same thing as system accounts. Though it can be. The idea is that there are a ton of capable PAM modules written for doing auth with all kinds of interesting auth systems that users may want to link their database to. Because drizzle has no transport layer security AFAIK, shipping PAM as the default using system users/passwords would be exposing system users and passwords to sniffing/mitm attacks. But having the capability *should* allow one to configure drizzle to auth against any of the many many pam sources available that aren't going to be built for Drizzle. I've failed each time I've tried to use the PAM module, but Brian Aker swears that if you're using a mysql client library that supports the "new" kind of authentication that it will work. Unfortunately, I don't think he has had time to put together a walk through that will help us get that done. _______________________________________________ Mailing list: https://launchpad.net/~drizzle-discuss Post to : [email protected] Unsubscribe : https://launchpad.net/~drizzle-discuss More help : https://help.launchpad.net/ListHelp
