<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"> <head> <META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"> <meta name=Generator content="Microsoft Word 12 (filtered medium)"> <style>  </style>  </head> <body lang=EN-US link=blue vlink=purple> <div class=Section1> Hello,<o:p></o:p> <o:p> </o:p> I am having problems with PAM/Apache authentication.<o:p></o:p> I have no problems logging in to the svn server thought ssh and authentication via the PAM server works. However when I use PAM to authenticate through SVN I am getting DB errors in the logs. Looking at the MySQL query logs I can see that the (Password) query that is being issued to MySQL is incomplete. As far as I know all Apache and Pam config files are correct. I decided to compare the mysql query logs on the currently working server and the new not working server . This comparison is in the end of the e-mail and this how I came to the conclusion that the query is incomplete.<o:p></o:p> <o:p> </o:p> <o:p> </o:p> Auth log on SVN server (svntest):<o:p></o:p> Oct 29 03:46:08 svntest nss-mysql[9707]: _nss_mysql_getspnam_r conf file parsing failed<o:p></o:p> Oct 29 03:46:08 svntest nss-mysql[9707]: (pam_unix) authentication failure; logname= uid=33 euid=33 tty= ruser= rhost=192.168. 6.43 user=ppragin<o:p></o:p> Oct 29 03:46:08 svntest nss-mysql[9707]: pam_mysql - MySQL error(You have an error in your SQL syntax; check the manual that c <o:p></o:p> orresponds to your MySQL server version for the right syntax to use near 'FROM WHERE user.user_name = 'ppragin'' at line 1)<o:p></o:p> <o:p> </o:p> <o:p> </o:p> Apache log on SVN server(svntest):<o:p></o:p> [Mon Oct 29 03:17:49 2007] [error] [client 192.168.] (9)Bad file descriptor: Could not open password file: (null)<o:p></o:p> [Mon Oct 29 03:17:52 2007] [error] [client 192.168.] PAM: user 'ppragin' - not authenticated: Error in service module<o:p></o:p> <o:p> </o:p> <o:p> </o:p> Mysql query log from Pam server when running svn checkout from server (svntest):<o:p></o:p> 131 Connect <a href="mailto:nss@svntest.solutionset.com">nss@svntest</a> on nss_mysql<o:p></o:p> 131 Query select user.user_name,user.uid,NULL,user.realname,user.shell,user.homedir,user.gid from user where <o:p></o:p> user.user_name='ppragin' and user.uid is not null and user.status = 'A' order by user.uid<o:p></o:p> 132 Connect nss-shadow@svntest. on nss_mysql<o:p></o:p> 132 Init DB nss_mysql<o:p></o:p> 132 Query SELECT FROM WHERE user.user_name = 'ppragin'<o:p></o:p> 132 Quit<o:p></o:p> <o:p> </o:p> Mysql query log from Pam server when running svn checkout from server (newsvn):<o:p></o:p> 753 Connect nss@newsvn. on nss_mysql<o:p></o:p> 753 Query select user.user_name,user.uid,NULL,user.realname,user.shell,user.homedir,user.gid from user where user.user_name='ppragin' <o:p></o:p> and user.uid is not null and user.status = 'A' order by user.uid<o:p></o:p> 753 Query select user.user_name,user.uid,NULL,user.realname,user.shell,user.homedir,user.gid from user where user.user_name='ppragin' <o:p></o:p> and user.uid is not null and user.status = 'A' order by user.uid<o:p></o:p> 754 Connect <a href="mailto:nss-shadow@newsvn.solutionset.com">nss-shadow@newsvn.</a> on nss_mysql<o:p></o:p> 754 Init DB nss_mysql<o:p></o:p> 754 Query SELECT user.Password FROM user WHERE user.user_name='ppragin'<o:p></o:p> 754 Quit<o:p></o:p> <o:p> </o:p> <o:p> </o:p> The difference: <o:p></o:p> (svntest server) 132 Query SELECT FROM WHERE user.user_name = 'ppragin'<o:p></o:p> (newsvn server) 754 Query SELECT user.Password FROM user WHERE user.user_name='ppragin'<o:p></o:p> <o:p> </o:p> I can understand why “user.Password” is missing. This is how the password is acquired from table “user” field “Password”. <o:p></o:p> This is why authentication is failing. One thing I don’t understand is where the information provided for this query comes from.<o:p></o:p> I don’t see any mention of “user.Password” in any of the config files. Maybe I am missing a step? Any ideas?<o:p></o:p> <o:p> </o:p> <o:p> </o:p> <table class=MsoNormalTable border=1 cellpadding=0 width=300 style='width:225.0pt; border:none;border-top:solid black 2.25pt'> <tr> <td style='border:none;padding:.75pt .75pt .75pt .75pt'> .<o:p></o:p> </td> </tr> <tr> <td valign=top style='border:none;padding:.75pt .75pt .75pt .75pt'> PAVEL PRAGIN <a href="mailto:ejohansson@solutionset.com">ppragin@solutionset.com</a> T > 650.328.3900 M > 650.521.4377 F > 650.328.3901 SolutionSet The Brand Technology Company <a href="http://www.solutionset.com/">http://www.SolutionSet.com</a> PA > 131 Lytton Ave., Palo Alto, CA 94301 SF > 85 Second St., San Francisco, CA 94105 <o:p></o:p> </td> </tr> </table> <o:p> </o:p> <o:p> </o:p> </div> </body> </html>