PAM-Mysql Authentication in Safesquid

General Information about how to make best use of this forum
India SiddharthDubey55
Posts: 15
Joined: Mon Nov 01, 2021 8:32 pm

PAM-Mysql Authentication in Safesquid

Post by SiddharthDubey55 » Fri Nov 19, 2021 9:29 pm

Scenario : - MYSQL PAM Authentication in SAFESQUID.

PROBLEM : -
(/VAR/AUTH.LOGS)
Nov 20 02:17:47 swg safesquid: pam_unix(safesquid:auth): check pass; user unknown
Nov 20 02:17:47 swg safesquid: pam_unix(safesquid:auth): authentication failure; logname=root uid=999 euid=999 tty= ruser= rhost=

Screenshot (80).png
Screenshot (80).png (258.49 KiB) Viewed 3419 times

STEPS I HAVE FOLLOWED :


1. CREATED ONE TEST USER IN MYSQL DATABASE SAFESQUID WITH COLUMN LOGIN_NAME AND PASSWORD IN USER TABLE ;

Screenshot (78).png
Screenshot (78).png (88.78 KiB) Viewed 3419 times


2. MADE CONFIG FILE IN /etc/pam_mysql.conf file

Screenshot (77).png
Screenshot (77).png (70 KiB) Viewed 3419 times

3. Added pam_mysql.so in /etc/pam.d/safesquid file

Screenshot (81).png
Screenshot (81).png (121.85 KiB) Viewed 3402 times
I have also changed the owner of pam_mysql.conf owner ssquid;


Last Step Created Access Restriction Rule on safesquid.cfg

Configure --> Application setup --> Access Restriction

IP address = 192.168.163.164
Pam Authentication = TRUE
username = test (this user is in SAFESQUID Database user table)


Screenshot (83).png
Screenshot (83).png (175.92 KiB) Viewed 3369 times
Please guide me what mistake i have doing.
Last edited by SiddharthDubey55 on Sun Nov 28, 2021 7:48 am, edited 1 time in total.

India SiddharthDubey55
Posts: 15
Joined: Mon Nov 01, 2021 8:32 pm

Re: PAM-Mysql Authentication in Safesquid

Post by SiddharthDubey55 » Mon Nov 22, 2021 7:51 pm

this Error I am getting in auth.log



Nov 23 01:10:02 swg safesquid: message repeated 7 times: [ pam_mysql - MySQL error (Access denied for user 'root'@'localhost' (using password: YES))]
Nov 23 01:12:50 swg safesquid: pam_mysql - MySQL error (Access denied for user 'root'@'localhost' (using password: YES))
Nov 23 01:13:00 swg safesquid: message repeated 8 times: [ pam_mysql - MySQL error (Access denied for user 'root'@'localhost' (using password: YES))]

Screenshot (82).png
Screenshot (82).png (238.38 KiB) Viewed 3401 times

clarity
Site Admin
Posts: 15
Joined: Tue Apr 23, 2019 12:28 pm

Re: PAM-Mysql Authentication in Safesquid

Post by clarity » Mon Dec 06, 2021 9:31 am

Looks like the database on MySQL needs to be given proper permissions.
Did you validate the credemtials for user@localhost?

Recommend use of pamtester for validating PAM related setup.
http://pamtester.sourceforge.net/

India SiddharthDubey55
Posts: 15
Joined: Mon Nov 01, 2021 8:32 pm

Re: PAM-Mysql Authentication in Safesquid

Post by SiddharthDubey55 » Mon Dec 06, 2021 11:37 am

Hello Sir ,
I have tried with default user table of mysql

I am able to log in mysql by using those user and password in my local system

I will show share screen shot with you

India SiddharthDubey55
Posts: 15
Joined: Mon Nov 01, 2021 8:32 pm

Re: PAM-Mysql Authentication in Safesquid

Post by SiddharthDubey55 » Tue Dec 07, 2021 5:20 pm

User table (DB - mysql)

Screenshot (92).png
Screenshot (92).png (104.19 KiB) Viewed 3336 times

/etc/pam-mysql.conf



Screenshot (95).png
Screenshot (95).png (119.59 KiB) Viewed 3335 times

/etc/pam.d/safesquid
Screenshot (94).png
Screenshot (94).png (95.04 KiB) Viewed 3334 times

India SiddharthDubey55
Posts: 15
Joined: Mon Nov 01, 2021 8:32 pm

Re: PAM-Mysql Authentication in Safesquid

Post by SiddharthDubey55 » Tue Dec 07, 2021 5:26 pm

Below you can see i am able to Login in MYSQLClient by using this USER


Screenshot (96).png
Screenshot (96).png (194.18 KiB) Viewed 3333 times



Screenshot (93).png
Screenshot (93).png (253.92 KiB) Viewed 3333 times

clarity
Site Admin
Posts: 15
Joined: Tue Apr 23, 2019 12:28 pm

Re: PAM-Mysql Authentication in Safesquid

Post by clarity » Thu Dec 09, 2021 8:12 am

What do you see in the MySQL logs for the authentication failure error events?
What is the result of pamtester?

India SiddharthDubey55
Posts: 15
Joined: Mon Nov 01, 2021 8:32 pm

Re: PAM-Mysql Authentication in Safesquid

Post by SiddharthDubey55 » Fri Dec 10, 2021 8:47 pm

Hello Sir,

Problem Solved

set user.password_crypt=0 ( /etc/pam-mysql.conf )

Thanks for the help

Post Reply