Hi, Adam! On Jan 19, Adam Balgach wrote:

Hello –

I am having an issue configuring openLDAP to authenticate users on an instance in RHEL (CentOS 7)

MariaDB server

configured with plugin-load=auth_pam.so

in my /etc/pam.d/mysql: auth required pam_ldap.so account required pam_ldap.so

when I try and access the server from either the localhost, or any server inside my internal network, I see the LDAP authentication happen without issue and login is fine.

When I try and access the server from outside the network, on the mariadb server in /var/log/secure I see the following:

Jan 19 08:32:35 mysqld: pam_ldap(mysql:auth): unexpected response from failed conversation function Jan 19 08:32:35 mysqld: pam_ldap(mysql:auth): conversation failed Jan 19 08:32:35 mysqld: pam_ldap(mysql:auth): failed to get password: Authentication token manipulation error

And in my client (Cygwin) I get the following error:

ERROR 2059 (HY000): Authentication plugin 'mysql_clear_password' cannot be loaded: No such file or directory

However I see this plugin in the /usr/lib64/mysql/plugin directory

Do you see it on the server or on the client? It is a client plugin, it must be stored on the client side and loaded run-time by your client. Regards, Sergei Chief Architect MariaDB and security@mariadb.org