[closed] PAM won't authenticate with mysql (make_scrambled_password)

Hi all,
I have spent some time searching for this and it seems I'm the only one having problem with PAM not authenticating through mysql so I thought I will post my problem here and if I find solution I will post here as well for others to follow.
In short - I'm running postfix with saslauthd and dovecot. Both are authenticating through pam employing mysql as credentials source.
Everything was working fine until today update - I can't connect to mail server any more and here is what I see in logs:
PAM unable to dlopen(/usr/lib/security/pam_mysql.so): /usr/lib/security/pam_mysql.so: undefined symbol: make_scrambled_password
PAM adding faulty module: /usr/lib/security/pam_mysql.so
DEBUG: auth_pam: pam_authenticate failed: Module is unknown
do_auth : auth failure: [user=xxxx] [service=smtp] [realm=xxxx] [mech=pam] [reason=PAM auth error]
So I may be wrong but to my understanding pam_mysql.so is using deprecated make_scrambled_password that is not supported by mysql any more.
I don't know what the solution would be and will appreciate if anybody can advice.
Many thanks in advance,
Greg
Last edited by Gregosky (2014-03-01 22:41:53)

Thanks, I have seen them but I thought this should be patched at source so no other Arch user would come across it.
I'm wondering why am I seeing this error now, after such a long time of using my postfix setup.. This must have been caused by latest update I ran yesterday as I have not modified any configuration.
I still did not find solution to this.
I submitted bug report on project page, hopefully some hints will arrive from there.
Now also submitted on Arch bug tracker.
Support for pam_mysql dropped. I will move to another backend. Case closed however there is no solution for pam_mysql.
Last edited by Gregosky (2014-03-01 22:40:54)

Similar Messages

Replace Quotes, Connection Pooling, and Sun Web Server with MySQL, Oracle

This is code I use to insert data into my MySQL and Oracle databases.
I takes care of quotes and shows use of context, i.e. when you use Sun Web Server's
ConnectionPooling. This code works. Feel free to reply if you have questions on how to set up connection pooling using Sun Web Server 6.1SP - it took quite a long time to learn and I couldn't find much information throughout the web, so I hope this helps...
This is not a question and I am not looking for an answer, but please post comments or suggestions.
dailysun
This is in one class where I have a hashtable containing the
column name / value pairs that I want to enter into my table.
This class simply creates the SQL string from the values in the
hashtable. It then passes that hashtable including the database
name to a class which executes that sql statement (second code
portion).
/* Insert data into sf_parts. Create the column strings from
 * the provided hash table. Be sure to parse out hash elements which
 * are used for the createTemplate process
 StringBuffer values = new StringBuffer();
 StringBuffer fields = new StringBuffer();
 Enumeration keys = fieldHash.keys();
 while(keys.hasMoreElements()){
 Object currentKey = keys.nextElement();
 String fieldValue = (String) fieldHash.get(currentKey);
 if(values.length() >0){
 values.append(",");
 values.append("'"+fieldValue.replaceAll("'","''")+"'"); // Takes care of quotes and various other special characters!
 if(fields.length() >0){
 fields.append(",");
 fields.append(currentKey);
 sql = "INSERT INTO myTable (" + fields.toString() + ") VALUES (" + values.toString() + ");";
 String insertResult = caq.getInsertDelete(sql,"myDatabaseName"); // your database name is defined in web.xml and sun-web.xml when you use Sun Web Server's Connection Pooling.
 returnValue += " Rows inserted into table(myTable): " + insertResult + " \n";
 And, like I describe above, this method executes the sql statement.
 * Takes care of insert, update and delete requests.
 * Must have set both dbName as well as the sql String.
 * Will return number of rows affected as String.
 * @return String Number of rows affected
 * @exception SQLException
 * @exception Exception
 public String getInsertDelete() {
 checkData(); // this simply checks if the variables dbName and sql are not empty ;-)
 InitialContext initContext = null;
 int rv = 0;
 try{
 // Get connection from configured pool
 initContext = new InitialContext();
 source = (DataSource) initContext.lookup("java:comp/env/jdbc/" + dbName); // I have this set up in web.xml and sun-web.xml (I use Sun Web Server 6.1SP which does connection pooling for me)
 conn = source.getConnection();
 if(conn != null){
 stmt = conn.createStatement();
 rv = stmt.executeUpdate(sql);
 }catch (SQLException e){
 // do something
 }catch (Exception e){
 // do something
 }finally{
 try{
 stmt.close();
 }catch(Exception e){
 // do something
 try{
 conn.close();
 }catch(Exception e){
 // do something
 try{
 initContext.close();
 }catch(Exception e){
 // do something
 return rv+"";
 }

This is code I use to insert data into my MySQL and
Oracle databases.
I takes care of quotes and shows use of context, i.e.
when you use Sun Web Server's
ConnectionPooling. This code works. Feel free to
reply if you have questions on how to set up
connection pooling using Sun Web Server 6.1SP - it
took quite a long time to learn and I couldn't find
much information throughout the web, so I hope this
helps...
This is not a question and I am not looking for an
answer, but please post comments or suggestions.Using prepared statements would mean that you wouldn't have to worry about quotes.
You should be closing the result set.
You are handling all fields as strings. That won't work with time fields and might not work for numeric fields.
Presumably most of your variables are member variables. They should be local variables because that is the scope of the usage.
You must do something with the exceptions.
Hashtables although convienent mean that problems with usage can only be resolved at run time rather than compile time.

BrowserLab won't work with local files in DW CS5

Any issue report you make about BrowserLab on these forums should minimally contain the following information. If it doesn't, the first response you get from us will likely just ask for the missing info anyway
Subject
A descriptive summary of the issue.
The body should contain:
Problem Description
A brief description of the bug or issue
Steps to Recreate
The steps we should follow to reproduce your issue. Minimally include all the following:
Does the issue happen every time, is it sporadic, or did it only happen once.
Are you testing on Mac or Windows?
Are you using the main BrowserLab interface, testing via Dreamweaver integration (and if so, what version of DW), or using the BrowserLab for Firebug add-on?
What is the URL you're testing against. If it's not public, let us know and let us know if you can send us the page source.
Expected Results
Based on the steps you described, what you thought should happen
Actual Results
What actually did happen
Thanks everyone,
Mark
Using BrowserLab in DW 11.0 Build 4964, BrowserLab can't seem to work. Some not very intuitive places I have checked include making sure the signon credentials are in the CSLive window in DW.
In preview local/browser, the following messages are disappointing me:
Timed Out, Failed to Authenticate with Browserlab
Session Expired, See Browser
It is on a Mac, 10.6.7, using DW integrated testing. I can log into browserlab and put a public URL, but I don't think that's going to be much better for me than having VMWare and installing free browsers on Mac and Windows, and given the failures here that would be better for local file checks too. I write this because I wonder if I will be disappointed trying to get this to work and then find out I have to pay a yearly subscription to CSLive to be able to keep using it.
This is on a private URL and I can send the page source, but I don't think its the page that is causing the issue.
Expected results:
Able to preview page in any browser of my choosing
Actual results:
Spent the last two hours navigating help, googling possible solutions, getting many errors trying to navigate the Adobe help and forums, continually signing in on each adobe page I open. Expecting to have to reauthenticate to post this message. (Updated extension manager as well).

Hi,
First, there is no charge currently for using CSLive and there won't be any charge for another year.
Second, based on what you're saying about the behavior you're seeing with BrowserLab and the issues you had with continually having to sign onto the Adobe pages, it's a strong indication that you've got cookies disabled in your browser or that something on your machine is deleting/expiring the cookies we are trying to set. What browser/version are you using and what kinds of permissions have you got set for cookies in that browser? Can you check that and change your cookie permissions for Adobe.com at least?
Let me know if that helps or not,
Mark

My ical won't sync with iPhone 4 after IOS 6.0.1 update

My ical won't sync with iPhone 4 after IOS 6.0.1 update. The "sync calendars" option is no longer available after I installed this update. Any ideas???I have tried a few times to sync, and nothing has changed on my calendars. I have had so many troubles with this update. Grrr...

I tried the same but it did not worked. But, i got a solution. I accessed gmail on my laptop. Went to gmail settings. There is a option to add a device. A iPhone was already listed. I clicked Revoke to remove it. Then i clicked add new device and gave it iPhone name and a new 16-20 character password was geenrated. I used it to configure gmail on my Iphone and it worked beautifully. So glad i have been able to fix this. That password is a one time password to authenticate that device.

Firefox 12 doesn't load bookmarks in sidebar, home pages don't open, undo closed tab won't work.

Firefox 11 worked fine. Firefox 12 seemed to install too fast. Now, when opening Firefox, bookmarks don't load in sidebar, even though the top of the sidebar says "bookmarks." Home pages won't load on opening Firefox---only a new tab. Clicking on the little house icon opens the home pages. Display closed tabs icon is dark and Undo closed tabs won't work. Sometimes the toolbar with File, Edit, View etc goes so dark it virtually disappears. I have Vista OS. Reinstalling Firefox 12 didn't help. Is there a fix, or can I go back to Firefox 11?

Do a clean (re)install and delete the Firefox program folder (C:\Program Files\Mozilla Firefox\).
Download a fresh Firefox copy and save the file to the desktop.
*Firefox 12.0.x: http://www.mozilla.org/en-US/firefox/all.html
Uninstall your current Firefox version, if possible.
*Do NOT remove personal data when you uninstall your current Firefox version, because all profile folders will be removed and you will also lose your personal data like bookmarks and passwords from profiles of other Firefox versions.
Remove the Firefox program folder before installing that newly downloaded copy of the Firefox installer.
*It is important to delete the Firefox program folder to remove all the files and make sure that there are no problems with files that were leftover after uninstalling.
*http://kb.mozillazine.org/Uninstalling_Firefox
Your bookmarks and other profile data are stored elsewhere in the Firefox Profile Folder and won't be affected by a reinstall, but make sure that you do not select to remove personal data if you uninstall Firefox.
*http://kb.mozillazine.org/Profile_folder_-_Firefox
*http://kb.mozillazine.org/Profile_backup
*http://kb.mozillazine.org/Standard_diagnostic_-_Firefox#Clean_reinstall

Im trying to install adobe flash player and it says i need to close firefox i did and it still says i haven't and won't continue with download

its saying to close firefox after i have closed it and won't continue with installing flash player

Download and installation are two separate steps. The Adobe Flash '''installation''' procedure requires that Firefox be closed before installing Flash.
orange Firefox button > '''''Exit''''' or File > Exit to close Firefox. Then wait a minute or so before starting to install Flash.

Php with mysqli, mbstring and xsl extensions

I don't understand why php isn't build with mysqli and mbstring extensions since mysql4 is installed and there are a lot of languages that need multibytes strings. Here is a PKGBUILD that enable them. I also added xsl extension to use xsl files with php.
# $Id: PKGBUILD,v 1.51 2004/12/16 22:03:19 judd Exp $
# Maintainer: dorphell <[email protected]>
# Contributor: Benoit Chesneau <[email protected]>
pkgname=php
pkgver=5.0.3
pkgrel=2
pkgdesc="A high-level scripting language"
url="http://www.php.net"
backup=(etc/php.ini)
depends=('openssl' 'libjpeg' 'freetype2' 'libpng' 'pam'
'gdbm' 'libxml2' 'openldap' 'ncurses' 'curl' 'libxslt')
makedepends=('apache' 'mysql' 'imap' 'postgresql' 'bzip2' 'smtp-server'
'gd' 'fam' 'sqlite3' 'unixodbc')
source=(http://www.php.net/distributions/$pkgname-$pkgver.tar.gz php.ini)
md5sums=('bf89557056ce34d502e20e24071616c7' 'd5b9b37fbb746f0967d795763106735a')
build() {
cd $startdir/src/$pkgname-$pkgver
./configure --with-apxs2 --prefix=/usr --sysconfdir=/etc
--with-layout=PHP
--with-ttf --enable-mailparse --with-config-file-scan-dir=/etc
--enable-bcmath=shared --enable-calendar=shared --enable-ftp=shared
--enable-gd-native-ttf --enable-magic-quotes --enable-posix=shared
--enable-session --enable-shared --enable-shmop=shared --with-imap
--with-imap-ssl --with-ncurses --with-readline --with-sqlite=shared
--enable-sysvsem=shared --enable-sysvshm=shared --enable-track-vars
--enable-trans-sid --enable-safe-mode --enable-sockets=shared
--enable-xml --with-bz2=shared --with-curl --with-mime-magic
--with-unixODBC=shared
--enable-dba --without-db2 --without-db3 --with-inifile --with-flatfile
--with-gdbm --with-freetype-dir=/usr --with-gd=shared --enable-exif
--with-jpeg-dir=/usr --with-mysql=/usr --with-mysqli=/usr/bin/mysql_config
--with-ldap=shared
--with-mysql-sock=/tmp/mysql.sock --with-openssl --with-gettext
--with-pear=/usr/share/pear --with-dom --with-dom-xslt
--with-pgsql=shared --with-pgsql-sock=/tmp/pgsql.sock
--with-png-dir=/usr --with-regex=php --with-zlib --with-fam=shared
--with-xsl
--enable-mbstring=all --enable-mbregex
# fixes a build error in sqlite support
ln -s main/php_config.h ./config.h
make || return 1
mkdir -p $startdir/pkg/usr/lib/apache
# cp config_vars.mk config_vars.old
# sed "s|^INSTALL_IT.*$|INSTALL_IT = apxs -i -a -S LIBEXECDIR=$startdir/pkg/usr/lib/apache -n php4 libs/libphp4.so|" config_vars.old >config_vars.mk
sed -i "s|-i -a -n php5|-i -n php5|g" Makefile
make INSTALL_ROOT=$startdir/pkg EXTENSION_DIR=/usr/lib/php install
cp ../php.ini $startdir/pkg/etc

i suggest filing a feature request through the bug tracker.
As for why such features may not be compiled in is that whoever maintains the package may have never had the need to have such features in php or experienced any issue because of it. You will experience this with many distros so I suggest not getting accusatory and simply request the feature through the proper channels.
Each persons needs and experience are different and that is why developers write their code to encompass as many features as their users request. How robust a package needs to be in arch is up to people like you giving the crucial feedback.
(btw i don't see why your request would not be granted. I suggest the feature request though because i know the maintainer of the PHP package is not a frequent visitor to this forum but he will get your request if you make to the bug tracker)

Php4 with mysql

I need to get this to work..... php4.3.10 with mysql...
tried about every single PKGbuild i could find, but every single one
of them dont give me support for mysql... Meaning trying to use phpmyadmin i get mysql module not loaded ... I have used this pkgbuild in which you can see i do use the --with mysql flag/option... can some one plz help me out here or tell me where i go wrong or what i have to do to make it work ???? plz ....
pkgname=php
pkgver=4.3.10
pkgrel=2
pkgdesc="A high-level scripting language"
backup=(etc/php.ini)
depends=('openssl' 'libjpeg' 'freetype2' 'libpng' 'pam'
'gdbm' 'libxslt' 'openldap')
makedepends=('apache' 'mysql' 'bzip2' 'smtp-server')
source=(http://www.php.net/distributions/$pkgname-$pkgver.tar.gz php.ini)
url="http://www.php.net"
build() {
cd $startdir/src/$pkgname-$pkgver
./configure --with-apxs2 --prefix=/usr --sysconfdir=/etc
--with-ttf --enable-mailparse --with-config-file-scan-dir=/etc
--enable-bcmath=shared --enable-calendar=shared --enable-ftp=shared
--enable-gd-native-ttf --enable-magic-quotes --enable-posix=shared
--enable-session --enable-shared --enable-shmop=shared
--enable-sysvsem=shared --enable-sysvshm=shared --enable-track-vars
--enable-trans-sid --enable-safe-mode --enable-sockets=shared
--enable-xml --with-bz2=shared --without-db2 --without-db3
--with-freetype-dir=/usr --with-gd --with-gdbm --enable-exif
--with-jpeg-dir=/usr --with-mysql=shared,/usr --with-ldap
--with-mysql-sock=/tmp/mysql.sock --with-openssl --with-gettext
--with-pear=/usr/share/pear --with-dom --with-dom-xslt
--with-png-dir=/usr --with-regex=php --with-zlib --with-curl
make || return 1
mkdir -p $startdir/pkg/usr/lib/apache
# cp config_vars.mk config_vars.old
# sed "s|^INSTALL_IT.*$|INSTALL_IT = apxs -i -a -S LIBEXECDIR=$startdir/pkg/usr/lib/apache -n php4 libs/libphp4.so|" config_vars.old >config_vars.mk
sed -i "s|-i -a -n php4|-i -n php4|g" Makefile
make INSTALL_ROOT=$startdir/pkg EXTENSION_DIR=/usr/lib/php install
cp ../php.ini $startdir/pkg/etc

exactly. build php. install the package.
find out what the name of the mysql extension is..
ls -lR /usr/lib/php/extensions | grep -i 'sql'
look for the one that is similar to mysql.so or something..
then edit php.ini, and add
extension=mysql.so
if might already be in there...just uncomment it if it is.
then restart apache.

Radius server (not elektron!) interacting with mysql DB and LDAP

I am installing a service that requires a radius server. I have tried to build and install freeradius from source, as well as used the installer packages that are out there. None of them include support for mysql. As soon as you turn on sql in the radiusd.conf you get an error like this:
rlm_sql: Could not link driver rlmsqlmysql: file not found
Similar to the problem described here:
http://www.freeradius.org/faq/#4.14
Except that I get an error saying that rlmsqlmysql.a is an invalid image. The file exists and freeradius sees it and can find it, it's just not usable by freeradius. Like I said I have tried building this from the latest cvs source, and finally got it to build completely fine, and even except connections.
I just need it to authenticate to mysql now.
Anybody have any pointers. I have tried some of the suggestions on the freeradius faq, but I think what I am encountering is an issue specific to os x tiger. I have even tried to install using darwinports, but the installation fails.
The system I am trying to install this on is running 10.4.2 (I am apprehensive about updating the system, because of issues with mysql being hosed.)
If anyone thinks or knows that 10.4.2 has specific issues as to why it cannot be installed on 10.4.2 I may need to look into doing a backup and then upgrade of the server, and attempt freeradius install on 10.4.7.
Thanks in advance for any and all help!

Big help you OS Xers are. J/P!
Since this place is supposed to be about education, let's educate!
I ended up installing OpenRadius and using RADsql (it comes with openradius). It's a bit finicky, but in the end it seems to be working. You also have to install Perl DBI, and Perl DBD Mysql, all of which I installed using darwing ports (also btw, you are better off getting the darwin/macports source and compiling it yourself, rather than using the DMG installer) If you are paranoid about using terminal there is an app out their called PORT AUTHORITY which is basically a gui front end to install darwinport apps.
You may have to do a little searching, but the key is getting the behaviour file and the config file correct, I found examples of the two I needed here:
http://www.mirrors.wiretapped.net/security/authentication/radius/openradius/exam ples/0.9.10/
I am attempting to also have openradius look at ldap if it can't auth to sql, I think this is possible, since it seemed to be in freeradius. So that our users don't need to choose a seperate auth protocol.
I hope at least part of what I have to say will help someone out there, I will update this as I find out more. Right now I can only auth via clear-password, which is not really much of an issue, since this will all be LAN and WAN behind a firewall. But it would be nice if it was at least MD5 which openradius is supposed to support.

Connection pool issues with Mysql

Hi,
I have defined sufficient read connections (50) in the toplink configuration, I am finding toplink is not releasing the connections in Mysql, this is when run from Jboss App server.
Is anyone aware of toplink connection pool issues with MySql?
thanks

TopLink always closes connections, I cannot see how this could occur.
Please include your persistence.xml or sessions.xml. Also ensure you are closing your EntityManager or ClientSession, especially if using exclusive connections.
Also include the exception you are getting.
James : http://www.eclipselink.org

Firefox 3.6.3 won't start with a particular file:///

I can do {"c:\Program Files\Mozilla Firefox\firefox.exe" file:///n:\911c\OwenShow\helphtm\ohelpfrm.htm} but I can't do the same thing in a windows exec; firefox runs and hangs-up in the background. I assume this is FF's problem because when I run firefox again after killing it, the file appears correctly; or if I run firefox, and then try the exact same exec process, it works (i.e., in a 2nd tab). And I think closing "Firefox won't start after update 3.6.3 downloads and installs" was ridiculous, since the supposed solution ENDED WITH A QUESTION and WAS NOT a solution. j.g. owen * email: [email protected] * web: http://owenlabs.org

And wonderful!
Updated OSX (10.6.5) - and then thought what the heck, I'll trying enabling Firefox Sync. And it worked - for a couple of days. Until I accepted the update for Firefox Sync (1.5.1) - and I am back where I started, nothing works.
I have no clue about this

Mac calendar and contacts won't sync with iPhone 5 since upgrading to Mavericks.

Please,please, help,
My mac calendar and contacts (and who know what else) won't sync with my iPhone 5 since updating to Mavericks. I have lost new medical appointments on my mac which never synced to my iPhone. I am completely frazzled as I am a very busy mum (who isn't!) and the call centre is closed! A am a bit of a technophobe but have discovered the "info" tab that appears when I connect my iphone to my mac to sync has disappeared with Mavericks. I hope someone out there can help me.

Yes, you can reinstall your system from the backup you made before installing Mavericks. See this link
OS X Mavericks: Revert to a previous OS X version
Cheers
Pete

Peoplesoft with Mysql

Hello All,
I want to implement peoplesoft application( hr, finance, crm etc) with mysql database as backend
Any ideas or suggestions, any links would be highly appreciatable.
Regards,

Rabin Halder wrote:
I think as PeopleSoft can be installed on MySQL database. But, you've to work hard to modify the delivered database script to make it compatible as per MySQL. But, again, as it's not tested on MySQL, you will find a lot of issues. And, you've to troubleshoot yourself as help for PeopleSoft on MySQL won't be available.
No, it cannot be installed. Some installation part are hardcoded in binaries that you cannot change. That said, before speaking about database script or whatever else, what would be your installation license code which is database type based ?
Nicolas.

ACS with MySQL

Hi, Is it possible to use ACS with mySQL database?
regards
Steffen

Depends on what you mean.
The ODBC Authenticator (that is authenticate users against an external ODBC datasource) should work fine with mySQL. There is a white paper I wrote still kicking about on CCO somewhere if you search for it.
If you mean can you use mySQL for ACSs own internal database.. then no you cant.
Darran

Closed captioning won't display in html/swf

I have embedded a swf file in html. The closed captioning displays when I view the .swf file and when I view the Flash published html. However, when I view the fully created Web page, the closed captioning won't display. Does anyone have any ideas?
Specs:
The video was created with Captivate 4, published as an .avi and then as an .f4v with Adobe Media Encoder CS4
The .f4v is imported into a Flash CS4 framework.
The closed captioning file was created with MAGpie and exported to a dfxp file.
The .swf file containing all of the necessary files above is embedded in a Web site created with Macromedia Dreamweaver 8.

Oddly enough, I played with the placement of the captioning file to get this to work. While all the other resource files associated with this project needed to remain in the original locations when I embedded my Flash within the html, this file needed to be in the same folder as the base html code for some reason. I hope this helps someone else down the road.

[closed] PAM won't authenticate with mysql (make_scrambled_password)

Similar Messages

Maybe you are looking for