PAM authentication fails for local UNIX users

From: Dhanaraj M <Dhanaraj(dot)M(at)Sun(dot)COM>
To: pgsql-hackers(at)postgresql(dot)org
Subject: PAM authentication fails for local UNIX users
Date: 2007-08-20 10:21:16
Message-ID: 46C96B1C.4010302@sun.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers pgsql-patches

Hi all,

http://archives.postgresql.org/pgsql-admin/2003-02/msg00301.php

I also try to address the same issue..

I run postmaster as postgres user and pg_hba.conf includes the following
entry:

local all dhanaraj pam

However, the authentication fails for this unix local user, whereas it
works for LDAP users.

bash-3.00$ psql -h superdesktop.india.sun.com -U dhanaraj mydb
Password for user dhanaraj:
psql: FATAL: PAM authentication failed for user "dhanaraj"

The following error message that I could see in the server log:
......................
LOG: pam_authenticate failed: Conversation failure
FATAL: PAM authentication failed for user "dhanaraj"
LOG: pam_authenticate failed: No account present for user
FATAL: PAM authentication failed for user "dhanaraj"

The non-root user does not have the permission to read other unix local
user password.
I found two solutions:

1. usermod -K defaultpriv=Basic,file_dac_read postgres

- Gives privilege to read all files. This solution works. Is it the
right way to do?

2. chmod +s processName

- This does not work, because postgres never allows this.

Is there anyother solution to this problem?

Thanks
Dhanaraj

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Andrew Dunstan 2007-08-20 11:33:25 Re: PAM authentication fails for local UNIX users
Previous Message Luca Ferrari 2007-08-20 09:21:01 RelOptInfo->reltargetlist

Browse pgsql-patches by date

  From Date Subject
Next Message Andrew Dunstan 2007-08-20 11:33:25 Re: PAM authentication fails for local UNIX users
Previous Message Pavan Deolasee 2007-08-20 05:27:55 HOT patch - version 14