Issues with PAM : log that it failed, whether it actually failed or not

From: La Cancellera Yoann <lacancellera(dot)yoann(at)gmail(dot)com>
To: pgsql-general(at)postgresql(dot)org
Subject: Issues with PAM : log that it failed, whether it actually failed or not
Date: 2019-10-11 08:38:58
Message-ID: CACP=ajbrFFYUrLyJBLV8=q+eNCapa1xDEyvXhMoYrNphs-xqPw@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general pgsql-hackers

Hi,

I am having issues with PAM auth :

it works, password are correctly checked, unknown users cannot access,
known user can, everything looks good

But, it always log an error by default even if auth is succesful:

2019-10-10 15:00:46.481 CEST [6109] LOG: pam_authenticate failed:
Authentication failure
2019-10-10 15:00:46.481 CEST [6109] FATAL: PAM authentication failed for
user "ylacancellera"
2019-10-10 15:00:46.481 CEST [6109] DETAIL: Connection matched pg_hba.conf
line 5: "local all all pam"
2019-10-10 15:00:46.481 CEST [6109] LOG: could not send data to client:
Broken pipe

And if auth is unsuccessful, it will log that very same message twice

My pg_hba is basically :

local all postgres peer

local all all pam

Any idea about this ? I suspect something is wrong

Thank you,

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Markus Heiden 2019-10-11 08:49:09 How to make runtime partition pruning work?
Previous Message Jeremy Finzel 2019-10-10 21:42:24 Re: DDL support for logical replication

Browse pgsql-hackers by date

  From Date Subject
Next Message David Rowley 2019-10-11 08:47:51 Re: BRIN index which is much faster never chosen by planner
Previous Message Pavel Stehule 2019-10-11 08:22:28 Re: PostgreSQL, C-Extension, calling other Functions