Connector/J Fails PAM Authentication Plugin Users due to mysql_clear_password Configuration Failure (Doc ID 1497342.1)

Last updated on MARCH 08, 2017

Applies to:

MySQL Connectors - Version 5.2 and later
MySQL Server - Version 5.5 and later
Information in this document applies to any platform.

Symptoms

On : 5.2 version, Connector/J and JDBC

When attempting to connect to MySQL via JDBC using the PAM authentication plugin, the following error occurs.

ERROR
-----------------------
SQLException : SQL state: null java.sql.SQLException: SSL connection required for plugin 'mysql_clear_password'. Check if "useSSL" is set to "true". ErrorCode: 0



STEPS
-----------------------
The issue can be reproduced at will with the following steps:
1. Configure a test connection using JDBC.
2. Attempt to connect as a user who is authentication via the PAM authentication plugin

BUSINESS IMPACT
-----------------------
The issue has the following business impact:
Due to this issue, users cannot connect when using PAM authentication.

Changes

 This only affects more recent versions of the Connector/J plugin which are enforcing a stricter security model when using clear text passwords.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms