4 ms·
Currently in Odyssey password_passthrough works only for cleartext auth, PAM and LDAP. Probably, we could make this for MD5 work too. And it's the whole purpose
by x4m 5y ago
Currently in Odyssey password_passthrough works only for cleartext auth, PAM and LDAP.
Probably, we could make this for MD5 work too. And it's the whole purpose of SCRAM to defeat this feature :)
The other way to do so is auth_query - you provide a storage password to access auth data of the DB. This works for MD5 auth. When user wants to authenticate we just check credentials against what we see in the database.
- 3np 5y agoThanks for the pointers! I did play around a bit but it seems to segfault and I'm not sure how to proceed. https://github.com/yandex/odyssey/issues/361 https://github.com/yandex/odyssey/issues/361
- x4m 5y agoIt seems like there's issue when you have a user for accessing authentication table you login with the same user. It fails when due to mixing same pool for auth and for work. I'll look into differentiating these pools more closely. As a simple workaround you can setup different user for accessing password and not login into Odyssey with this user.
- 3np 5y agoThanks for following up. auth_query_user is not the same as the user I'm attempting to authenticate with, though. And I get the same behavior with other users, including non-existing ones. Or are you referring to something else?