Message-ID: <1497004856.4355.8.camel@gunduz.org>
Subject: Re: Possible bug for pam auth in at least 9.6 and
 10 rpms on CentOS 7
From: Devrim =?ISO-8859-1?Q?G=FCnd=FCz?= <devrim@gunduz.org>
To: Jesper St John <admin@zonezero.se>, pgsql-pkg-yum@postgresql.org
Date: Fri, 09 Jun 2017 11:40:56 +0100
In-Reply-To: <4529a5e9d4d40abd2e0df7ab49c94118@zonezero.se>
References: <4529a5e9d4d40abd2e0df7ab49c94118@zonezero.se>
Content-Type: multipart/signed; micalg="pgp-sha256";
	protocol="application/pgp-signature"; boundary="=-meh5ugNzo8Hc+2KOzTFC"
Mime-Version: 1.0
Precedence: bulk
Sender: pgsql-pkg-yum-owner@postgresql.org


--=-meh5ugNzo8Hc+2KOzTFC
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable


Hi Jesper,

Seems reasonable. I'll apply this patch early next week.

Regards, Devrim

On Thu, 2017-06-08 at 14:11 +0200, Jesper St John wrote:
> When installing postgresql-server package, it puts a file in /etc/pam.d/=
=C2=A0
> called postgresql%{majorversion}.
>=20
> Postgres source says this (src/backend/libpq/auth.c):
> #define PGSQL_PAM_SERVICE "postgresql"=C2=A0=C2=A0/* Service name passed =
to PAM */
>=20
> That creates the need to create a new file named /etc/pam.d/postgresql=C2=
=A0
> to make pam auth work for me.
>=20
> I've tested this with both 9.6 and 10 beta on CentOS 7 latest.
>=20
>=20
> Best regards,
> Jesper St John
> admin@zonezero.se
>=20
>=20
>=20
> Suggested patch below:
>=20
>=20
> diff --git a/rpm/redhat/10/postgresql/master/postgresql-10.spec=C2=A0
> b/rpm/redhat/10/postgresql/master/postgresql-10.spec
> index d6e53b0c..32542462 100644
> --- a/rpm/redhat/10/postgresql/master/postgresql-10.spec
> +++ b/rpm/redhat/10/postgresql/master/postgresql-10.spec
> @@ -781,7 +781,7 @@ install -m 755 %{sname}.init=C2=A0
> %{buildroot}%{_initrddir}/%{sname}-%{pgmajorversion
>=20
> =C2=A0 %if %pam
> =C2=A0 install -d %{buildroot}/etc/pam.d
> -install -m 644 %{SOURCE14}=C2=A0
> %{buildroot}/etc/pam.d/%{sname}%{pgmajorversion}
> +install -m 644 %{SOURCE14} %{buildroot}/etc/pam.d/%{sname}
> =C2=A0 %endif
>=20
> =C2=A0 # Create the directory for sockets.
> @@ -1231,7 +1231,7 @@ fi
> =C2=A0 %config(noreplace) %{_initrddir}/%{sname}-%{pgmajorversion}
> =C2=A0 %endif
> =C2=A0 %if %pam
> -%config(noreplace) /etc/pam.d/%{sname}%{pgmajorversion}
> +%config(noreplace) /etc/pam.d/%{sname}
> =C2=A0 %endif
> =C2=A0 %attr (755,root,root) %dir /etc/sysconfig/pgsql
> =C2=A0 %{pgbaseinstdir}/bin/initdb
>=20
>=20

--=20
Devrim G=C3=BCnd=C3=BCz
EnterpriseDB: https://www.enterprisedb.com
PostgreSQL Dan=C4=B1=C5=9Fman=C4=B1/Consultant, Red Hat Certified Engineer
Twitter: @DevrimGunduz , @DevrimGunduzTR

--=-meh5ugNzo8Hc+2KOzTFC
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQIcBAABCAAGBQJZOns4AAoJENjDPf6Sz261j0QP/37MbgcDfdwcKumeQ2cVLFIi
tqNpp38nKdy6moA6655NYmtF1+BS6qBuU3KoJYNNWmZi/OqZ53X520rGC45hXOm3
I5U3ca9LeiwcL25SpUsWCSa1EXE8vecs4BV+TqJe6htbPhoQ7UEYh2q4ng2cPmYs
+yNiVCkeN83fKCSah5GLzJcgDvgrehiSqhfOx9EtbJSzt/5I1nTVDwMeDHXaKTNP
Gsp6+e/7C122H0HTGSH16QPIKZ3upSFVf9551h22TTjiUWjByRQ6YDtEmADym357
N2AYKogXDs3wIrnP/YOcIS6lg/h3/OsAdU/6oScKZS5y0BR1hqZ3HI8Zj3HB1bJc
bNwNeadG6pqkKTUgkHMFqMgS5T2l52f4lH1IhUDVkSccXTx9KRjjA4m4n5O152yw
LrqDI+346TkG2RVksJb+aU3G4pNag8uvogMNTQFxVi9Ui8gj1fhw2m0T3DkmZTsa
ZSPZtGmp9pjoLThpSLWy/KwKOv2AB2sulTuXVIY3l0A6g4ev+HHY1rJJauFGi/Uz
DLgWkPlZvjKNUAVJTf81fAic2DzFGVtjfk6a4AhgoXM9bXwSiwl9CSZQGblJwR6G
WVcml6LaEhwBlsUg61darayqjtHBKWOpB+PHKaodGqyIW+d+C80Fg0CpxCYIusnX
UYSLQzyUOBOdkozNvZzh
=0r4s
-----END PGP SIGNATURE-----

--=-meh5ugNzo8Hc+2KOzTFC--