Trouble in PAM authentication

Products

• VMware Tanzu Greenplum
• Greenplum
• Pivotal Data Suite Non Production Edition
• VMware Tanzu Data Suite
• VMware Tanzu Data Suite

Issue/Introduction

PAM-Based authentication has been configured for the Greenplum database.

The database log shows the user loggin is failing with the permissions of the gpadmin for the logname with the following message

Oct 15 15:28:27 ...... postgres[2414186]: _dev .....(59830) startup: pam_sss(password-auth:auth): authentication failure; logname=gpadmin uid=986 euid=986 tty= ruser= rhost=.... user=....

The pg_hba.conf file is setup with this line.

host     ....     ....     ....     pam     pamservice=/etc/pam.d/postgres

Resolution

Change pamservice= value in pg_hba.conf to specify only the service name as opposed to the full file path

See the server PAM authentication setup as per the instructions at PAM-Based Authentication