PAM-Mysql Authentication in Safesquid

General Information about how to make best use of this forum
India SiddharthDubey55
Posts: 15
Joined: Mon Nov 01, 2021 8:32 pm

PAM-Mysql Authentication in Safesquid

Post by SiddharthDubey55 » Fri Nov 19, 2021 9:29 pm

Scenario : - MYSQL PAM Authentication in SAFESQUID.

PROBLEM : -
(/VAR/AUTH.LOGS)
Nov 20 02:17:47 swg safesquid: pam_unix(safesquid:auth): check pass; user unknown
Nov 20 02:17:47 swg safesquid: pam_unix(safesquid:auth): authentication failure; logname=root uid=999 euid=999 tty= ruser= rhost=

Screenshot (80).png
Screenshot (80).png (258.49 KiB) Viewed 2691 times

STEPS I HAVE FOLLOWED :


1. CREATED ONE TEST USER IN MYSQL DATABASE SAFESQUID WITH COLUMN LOGIN_NAME AND PASSWORD IN USER TABLE ;

Screenshot (78).png
Screenshot (78).png (88.78 KiB) Viewed 2691 times


2. MADE CONFIG FILE IN /etc/pam_mysql.conf file

Screenshot (77).png
Screenshot (77).png (70 KiB) Viewed 2691 times

3. Added pam_mysql.so in /etc/pam.d/safesquid file

Screenshot (81).png
Screenshot (81).png (121.85 KiB) Viewed 2674 times
I have also changed the owner of pam_mysql.conf owner ssquid;


Last Step Created Access Restriction Rule on safesquid.cfg

Configure --> Application setup --> Access Restriction

IP address = 192.168.163.164
Pam Authentication = TRUE
username = test (this user is in SAFESQUID Database user table)


Screenshot (83).png
Screenshot (83).png (175.92 KiB) Viewed 2641 times
Please guide me what mistake i have doing.
Last edited by SiddharthDubey55 on Sun Nov 28, 2021 7:48 am, edited 1 time in total.

India SiddharthDubey55
Posts: 15
Joined: Mon Nov 01, 2021 8:32 pm

Re: PAM-Mysql Authentication in Safesquid

Post by SiddharthDubey55 » Mon Nov 22, 2021 7:51 pm

this Error I am getting in auth.log



Nov 23 01:10:02 swg safesquid: message repeated 7 times: [ pam_mysql - MySQL error (Access denied for user 'root'@'localhost' (using password: YES))]
Nov 23 01:12:50 swg safesquid: pam_mysql - MySQL error (Access denied for user 'root'@'localhost' (using password: YES))
Nov 23 01:13:00 swg safesquid: message repeated 8 times: [ pam_mysql - MySQL error (Access denied for user 'root'@'localhost' (using password: YES))]

Screenshot (82).png
Screenshot (82).png (238.38 KiB) Viewed 2673 times

clarity
Site Admin
Posts: 15
Joined: Tue Apr 23, 2019 12:28 pm

Re: PAM-Mysql Authentication in Safesquid

Post by clarity » Mon Dec 06, 2021 9:31 am

Looks like the database on MySQL needs to be given proper permissions.
Did you validate the credemtials for user@localhost?

Recommend use of pamtester for validating PAM related setup.
http://pamtester.sourceforge.net/

India SiddharthDubey55
Posts: 15
Joined: Mon Nov 01, 2021 8:32 pm

Re: PAM-Mysql Authentication in Safesquid

Post by SiddharthDubey55 » Mon Dec 06, 2021 11:37 am

Hello Sir ,
I have tried with default user table of mysql

I am able to log in mysql by using those user and password in my local system

I will show share screen shot with you

India SiddharthDubey55
Posts: 15
Joined: Mon Nov 01, 2021 8:32 pm

Re: PAM-Mysql Authentication in Safesquid

Post by SiddharthDubey55 » Tue Dec 07, 2021 5:20 pm

User table (DB - mysql)

Screenshot (92).png
Screenshot (92).png (104.19 KiB) Viewed 2608 times

/etc/pam-mysql.conf



Screenshot (95).png
Screenshot (95).png (119.59 KiB) Viewed 2607 times

/etc/pam.d/safesquid
Screenshot (94).png
Screenshot (94).png (95.04 KiB) Viewed 2606 times

India SiddharthDubey55
Posts: 15
Joined: Mon Nov 01, 2021 8:32 pm

Re: PAM-Mysql Authentication in Safesquid

Post by SiddharthDubey55 » Tue Dec 07, 2021 5:26 pm

Below you can see i am able to Login in MYSQLClient by using this USER


Screenshot (96).png
Screenshot (96).png (194.18 KiB) Viewed 2605 times



Screenshot (93).png
Screenshot (93).png (253.92 KiB) Viewed 2605 times

clarity
Site Admin
Posts: 15
Joined: Tue Apr 23, 2019 12:28 pm

Re: PAM-Mysql Authentication in Safesquid

Post by clarity » Thu Dec 09, 2021 8:12 am

What do you see in the MySQL logs for the authentication failure error events?
What is the result of pamtester?

India SiddharthDubey55
Posts: 15
Joined: Mon Nov 01, 2021 8:32 pm

Re: PAM-Mysql Authentication in Safesquid

Post by SiddharthDubey55 » Fri Dec 10, 2021 8:47 pm

Hello Sir,

Problem Solved

set user.password_crypt=0 ( /etc/pam-mysql.conf )

Thanks for the help

Post Reply