public inbox for [email protected]  

help / color / mirror / Atom feed

From: Jesper St John <[email protected]>
To: [email protected]
Subject: Possible bug for pam auth in at least 9.6 and 10 rpms on CentOS 7
Date: Thu, 08 Jun 2017 14:11:52 +0200
Message-ID: <[email protected]> (raw)
List-Unsubscribe: <mailto:[email protected]?body=unsub%20pgsql-pkg-yum>

When installing postgresql-server package, it puts a file in /etc/pam.d/ 
called postgresql%{majorversion}.

Postgres source says this (src/backend/libpq/auth.c):
#define PGSQL_PAM_SERVICE "postgresql"  /* Service name passed to PAM */

That creates the need to create a new file named /etc/pam.d/postgresql 
to make pam auth work for me.

I've tested this with both 9.6 and 10 beta on CentOS 7 latest.


Best regards,
Jesper St John
[email protected]



Suggested patch below:


diff --git a/rpm/redhat/10/postgresql/master/postgresql-10.spec 
b/rpm/redhat/10/postgresql/master/postgresql-10.spec
index d6e53b0c..32542462 100644
--- a/rpm/redhat/10/postgresql/master/postgresql-10.spec
+++ b/rpm/redhat/10/postgresql/master/postgresql-10.spec
@@ -781,7 +781,7 @@ install -m 755 %{sname}.init 
%{buildroot}%{_initrddir}/%{sname}-%{pgmajorversion

  %if %pam
  install -d %{buildroot}/etc/pam.d
-install -m 644 %{SOURCE14} 
%{buildroot}/etc/pam.d/%{sname}%{pgmajorversion}
+install -m 644 %{SOURCE14} %{buildroot}/etc/pam.d/%{sname}
  %endif

  # Create the directory for sockets.
@@ -1231,7 +1231,7 @@ fi
  %config(noreplace) %{_initrddir}/%{sname}-%{pgmajorversion}
  %endif
  %if %pam
-%config(noreplace) /etc/pam.d/%{sname}%{pgmajorversion}
+%config(noreplace) /etc/pam.d/%{sname}
  %endif
  %attr (755,root,root) %dir /etc/sysconfig/pgsql
  %{pgbaseinstdir}/bin/initdb


-- 
Sent via pgsql-pkg-yum mailing list ([email protected])
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-pkg-yum

view thread (4+ messages)  latest in thread

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: [email protected]
  Cc: [email protected]
  Subject: Re: Possible bug for pam auth in at least 9.6 and 10 rpms on CentOS 7
  In-Reply-To: <[email protected]>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox