It fails connection when server uses PAM
See original GitHub issueWhen I try to connect as a user the server expects to authenticate via the PAM Authentication Plugin, the following error is thrown
Error: Client does not support authentication protocol requested by server;
consider upgrading MariaDB client
After reading your node-mysql2 docs, and some investigations, I finally realized there’s no support for mysql_clear_password capabilities yet. I realized you provided an authSwitchHandler
configuration setting to properly react when the server asks for specific authentication methods.
Couldn’t it be useful providing mysql_clear_password
the same way mysql_native_password
authentication capabilities have been already provided internally? After reading the official MySQL Clear Text Authentication piece of documentation, we could easily implement it in Javascript.
Issue Analytics
- State:
- Created 7 years ago
- Comments:11 (5 by maintainers)
Top Results From Across the Web
The CA PAM Agent is unable to connect to a CA PAM server
Trying to connect to CA PAM via CA PAM Agent results in an error : PAM-AGT-1002:Cannot connect to the PAM server.
Read more >Connection Manager and PAM Configuration - IBM
Configuration to use PAM (pluggable authentication module) for authentication while connecting to an Informix server using a Connection Manager SLA (service ...
Read more >active directory fatal: Access denied for user by PAM account ...
I get an error message of the following: fatal: Access denied for user by ... I am unable to ssh into the box...
Read more >How to Troubleshoot PAM Configuration Errors
For details, see How to Log PAM Error Reports. If the problem is a corrupt PAM configuration, do the following: Run the application...
Read more >Session Connection Errors Codes
If you are attempting to Connect to a remote host and receiving a connection error code, then this typically means that PAM was...
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
I have been silently following this conversation and don’t have any strong opinions on it, but I do agree generally that it should be opt-in only. Even MySQL’s own documentation shows they also make it opt-in only for their own clients (http://dev.mysql.com/doc/refman/5.7/en/cleartext-authentication-plugin.html).
What about this: add support for cleartext auth and “old auth” but by default only allow to use them when connecting over unix socket or to localhost or over ssl