Inconsistent iinit irods_authentication_scheme setting for pam in 4.3.0
peterverraedt opened this issue · 1 comments
When using the pam(_password) method for authentication in irods, it is expected that .irods/irods_environment.json contains a value for irods_authentication_scheme that indicates pam is needed for logging in.
Up to version 4.2.11, the value that should be specified, was "PAM". In 4.3.0 this apparently has changed to "pam_password" (see #314), leading us to include a line
iinit -h | grep Version | grep -v -q 4.3.0 || sed -i 's/"irods_authentication_scheme": "PAM"/"irods_authentication_scheme": "pam_password"/' ~/.irods/irods_environment.json
in the snippet we distribute to our users for authentication.
However, as it turns out, the deb release of 4.3.0 for focal https://packages.irods.org/apt/, still expects "PAM", while the rpm release of 4.3.0 on https://packages.irods.org/yum/ now expects "pam_password". I.e. the above version check is not enough.
Invalid, as it seems, rpm version also accepts "PAM".