php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Request #75645 The server requested authentication method unknown to the client [dialog]
Submitted: 2017-12-07 09:45 UTC Modified: 2021-04-06 21:42 UTC
Votes:25
Avg. Score:4.3 ± 0.8
Reproduced:23 of 23 (100.0%)
Same Version:13 (56.5%)
Same OS:15 (65.2%)
From: michal at cihar dot com Assigned:
Status: Open Package: MySQLi related
PHP Version: 7.2.0 OS: any
Private report: No CVE-ID: None
View Developer Edit
 [2017-12-07 09:45 UTC] michal at cihar dot com 
Description:
------------
PHP fails to authenticate against MariaDB using PAM authentication. 

You can find all details in https://bugs.php.net/bug.php?id=68281, which has been reported against mysql extension and closed only because that extension has been deprecated meanwhile, however exactly same problem exists in MySQLi as well.

I've checked current git and the dialog plugin is still not there, so this applies to all PHP versions so far.

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2018-02-06 12:48 UTC] kstan at simitgroup dot com 
Yes, wish mysqli support PAM authentication. I'm wish to use pam_krb.so
 [2018-10-27 01:57 UTC] buphmin at gmail dot com 
I have also been able to reproduce this using mysqlnd with PDO and mysqli on php versions 7.0, 7.1, 7.2. I have not yet got around to recompiling PHP to use libmysqlclient to see if that also fails.
 [2019-02-10 17:03 UTC] kstan at simitgroup dot com 
I'm manage to recompile the using mariadb client in ubuntu. the gist as this link
https://gist.github.com/kstan79/028df3e715cac2b4d63e0b003b1233c7
 [2019-04-02 20:56 UTC] buphmin at gmail dot com 
Thank kstan! I got your gist working in a docker container after a few modifications. I would still prefer mysqlnd supporting PAM auth though.
 [2021-04-06 21:42 UTC] cmb@php.net 
Hmm, there is a PAM authentification plugin in mysqlnd[1] for
years – I wonder if it's just broken.

[1] <https://github.com/php/php-src/blob/php-7.4.16/ext/mysqlnd/mysqlnd_auth.c#L666>
 [2022-05-27 21:14 UTC] geoff dot montee at gmail dot com 
According to the code linked by cmb@php.net, PHP's mysqlnd supports the mysql_clear_password client authentication plugin for PAM (which can be used by both MySQL Server and MariaDB Server), but it probably does not currently support the dialog client authentication plugin for PAM (which can only be used by MariaDB Server).

Users should be able to work around this issue by configuring the pam_use_cleartext_plugin system variable on MariaDB Server to force it to use mysql_clear_password instead of dialog.

I would like to link to a documentation page that describes the problem and solution in more detail, but PHP's bug tracker appears to prohibit links.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Thu Nov 21 11:01:29 2024 UTC