[BUGS] BUG #14653: PAM authentication failed

The following bug has been logged on the website:

Bug reference:      14653
Logged by:          matan hury
Email address:      matan.hury@imperva.com
PostgreSQL version: 9.6.1
Operating system:   Linux rhel 7.2
Description:

Hi,
After a lot of attempts, I think that have a bug with PAM authentication
with PostgreSQL 9.6.

This is my configuration:
* On linux there's user -postgres with the same credentials of postgres user
on the DB server.

* The postgres user has permissions as root for /etc/shadow and
/etc/passwd.

* This is the PAM file of PostgreSQL:
auth         include    postgres=system-auth debug
account      include    postgres=system-auth
password     include    postgres=system-auth
#auth        required    pam_pgsql.so  
#account     required    pam_pgsql.so
#password    required    pam_pgsql.so

* This is the system-auth file:

auth        required      pam_env.so
auth        sufficient    pam_unix.so nullok try_first_pass
auth        requisite     pam_succeed_if.so uid >= 1000 quiet_success
auth        required      pam_deny.so

account     required      pam_unix.so
account     sufficient    pam_localuser.so
account     sufficient    pam_succeed_if.so uid < 1000 quiet
account     required      pam_permit.so

password    requisite     pam_pwquality.so try_first_pass local_users_only
retry=3 authtok_type=
password    sufficient    pam_unix.so sha512 shadow nullok try_first_pass
use_authtok
password    required      pam_deny.so

session     optional      pam_keyinit.so revoke
session     required      pam_limits.so
-session     optional      pam_systemd.so
session     [success=1 default=ignore] pam_succeed_if.so service in crond
quiet use_uid
session     required      pam_unix.so

* This is the METHOD option in pg_hba:
pam pamservice=PostgreSQL

* This is the error:
psql.bin: FATAL:  PAM authentication failed for user "postgres"

I expect for your fast reply ...

Thanks.





--
Sent via pgsql-bugs mailing list (pgsql-bugs@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-bugs