question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

It fails connection when server uses PAM

See original GitHub issue

When I try to connect as a user the server expects to authenticate via the PAM Authentication Plugin, the following error is thrown

Error: Client does not support authentication protocol requested by server;
       consider upgrading MariaDB client

After reading your node-mysql2 docs, and some investigations, I finally realized there’s no support for mysql_clear_password capabilities yet. I realized you provided an authSwitchHandler configuration setting to properly react when the server asks for specific authentication methods.

Couldn’t it be useful providing mysql_clear_password the same way mysql_native_password authentication capabilities have been already provided internally? After reading the official MySQL Clear Text Authentication piece of documentation, we could easily implement it in Javascript.

Issue Analytics

  • State:open
  • Created 7 years ago
  • Comments:11 (5 by maintainers)

github_iconTop GitHub Comments

1reaction
dougwilsoncommented, Oct 27, 2016

I have been silently following this conversation and don’t have any strong opinions on it, but I do agree generally that it should be opt-in only. Even MySQL’s own documentation shows they also make it opt-in only for their own clients (http://dev.mysql.com/doc/refman/5.7/en/cleartext-authentication-plugin.html).

1reaction
sidorarescommented, Oct 22, 2016

What about this: add support for cleartext auth and “old auth” but by default only allow to use them when connecting over unix socket or to localhost or over ssl

Read more comments on GitHub >

github_iconTop Results From Across the Web

The CA PAM Agent is unable to connect to a CA PAM server
Trying to connect to CA PAM via CA PAM Agent results in an error : PAM-AGT-1002:Cannot connect to the PAM server.
Read more >
Connection Manager and PAM Configuration - IBM
Configuration to use PAM (pluggable authentication module) for authentication while connecting to an Informix server using a Connection Manager SLA (service ...
Read more >
active directory fatal: Access denied for user by PAM account ...
I get an error message of the following: fatal: Access denied for user by ... I am unable to ssh into the box...
Read more >
How to Troubleshoot PAM Configuration Errors
For details, see How to Log PAM Error Reports. If the problem is a corrupt PAM configuration, do the following: Run the application...
Read more >
Session Connection Errors Codes
If you are attempting to Connect to a remote host and receiving a connection error code, then this typically means that PAM was...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found