Home / server / Questions / 626232
Accepted
sgohl
Asked: 2014-09-05 03:25:57 +0800 CST

CentOS 7 and pam_mysql for SSH Authentication

  • 772

I'm preparing my CentOS 6 server for upgrading to CentOS 7 and wondered where pam_mysql (from EPEL) was gone (yum search - no find). Then I heard about SSSD which sounds really good, but found it only in connection with LDAP - which I'd love to use but simply can't because I've got an admin panel (froxlor) running, which stores user data in a mysql-db (which is also the backend for proftpd w/mod_sql and libnss-mysql), and want to have SSH Login for the users, I need to have SSH Authentication via mysql.

libnss-mysql is already working - but I can't login via SSH.

How'd one accomplish this in CentOS 7 since pam_mysql is gone? Thanks a lot!

centos7

4 Answers

  1. While using a Fedora RPM might be ok for the most part, should you want to build your own RPM for Centos 7, based on the Fedora source RPM, this is the steps:

    # Install required build packages
yum install make gcc-c++ autoconf automake libtool rpm-build pam-devel mysql-devel openssl-devel

# Download the fedora source rpm
wget "ftp://ftp.pbone.net/mirror/archive.fedoraproject.org/fedora-secondary/releases/23/Everything/source/SRPMS/p/pam_mysql-0.7-0.20.rc1.fc23.src.rpm"

# Rebuild the RPM, it should say "Wrote blah blah.rpm" at the end
rpmbuild --rebuild pam_mysql-0.7-0.20.rc1.fc23.src.rpm

# Install the Centos Specific RPM
yum localinstall /home/you/rpmbuild/RPMS/x86_64/pam_mysql-0.7-0.20.rc1.el7.centos.x86_64.rpm

    Of course you should be using your Centos 7 server to do this rebuild.

    For any future Centos 7 setups now that you have a compatible RPM you can put it on your own Yum server or just a webserver/s3 bucket and install via a custom URL:

    yum localinstall http://www.example.com/path/to/pam_mysql-0.7-0.20.rc1.el7.centos.x86_64.rpm
    • 3

  2. I just configured a new CentOS 7 box and wanted to use mysql with vsftpd. I tried Cristian's suggestion and searched for: pam_mysql-0.7-0.16.rc1.fc20.x86_64.rpm

    Which I found here with a list of mirrors: http://rpm.pbone.net/index.php3/stat/4/idpl/25165183/dir/fedora_20/com/pam_mysql-0.7-0.16.rc1.fc20.x86_64.rpm.html

    I've tested it with vsftp and everything is fine.

    • 2
  3. Best Answer

    This project appears to be dead, with the last update in 2006. Naturally, it has been removed from EPEL because of this.

    However, there is a fork at https://github.com/NigelCunningham/pam-MySQL. Maybe try this, but I would be wary to use such an important module from outside of a standard repo.

    Maybe you could suggest this fork as replacement to the EPEL people.

    • 1

  4. More people than you think have this problem. I don't see any reason to not use pam_mysql. Try to use pam_mysql-0.7-0.15.rc1.fc19.x86_64.rpm (or pam_mysql-0.7-0.16.rc1.fc20.x86_64.rpm) from Fedora Everything. Check libnss-mysql version (libnss-mysql-1.5-20.fc20.x86_64.rpm, libnss-mysql-1.5-19.fc19.x86_64.rpm libnss-mysql-1.5-19.el7.x86_64.rpm). Seems to work, but test it first.

    • 0