MySQL Bugs: #84871: Windows Native Authentication Plugin not works for time to time

Bug #84871	Windows Native Authentication Plugin not works for time to time
Submitted:	8 Feb 2017 2:29	Modified:	28 Aug 2018 0:49
Reporter:	Gavin Lin	Email Updates:
Status:	Can't repeat	Impact on me:	None
Category:	MySQL Server: Pluggable Authentication	Severity:	S3 (Non-critical)
Version:	5.6.30-enterprise-commercial-advanced	OS:	Windows
Assigned to:		CPU Architecture:	Any

Description:
We have created some Active Domain users with Windows Native Authentication. And try to conect to MySQL server with MySQL ODBC 5.3 Driver in Excel. But the authentication works for sometime but not in another time. Some AD users have this issue, but some don't. We have catched the ODBC debug logs for success case and failed case.

How to repeat:
Client: Excel with MySQL ODBC 5.3 Driver in Windows 7 machine.
Server: 5.6.30-enterprise-commercial-advanced MySql run in Windows Server 2012.

The client and server are in one domain.

1. Create some users with Windows Native Authentication in server.
2. Connect from client to server with AD user.
3. The AD user is able to connect to server sometimes, but sometimes not.

ODBC debug log for failed case

Attachment: failed case.LOG (application/octet-stream, text), 64.69 KiB.

ODBC debug log for success case

Attachment: success case.LOG (application/octet-stream, text), 48.06 KiB.

Hello  Gavin Lin,

Thank you for the bug report.
I could not repeat the issue at our end using with Connector / ODBC 5.3.7, MySQL 5.6.35 and Excel 2013 version with Domain users with Windows Native Authentication.
Could you please provide repeatable test case (exact steps, screenshot etc. - please make it as private if you prefer) to confirm this issue at our end?

Thanks,
Chiranjeevi.

ODBC Connection

Attachment: 84871.JPG (image/jpeg, text), 56.77 KiB.

Excel to ODBC

Attachment: 84871_1.JPG (image/jpeg, text), 175.96 KiB.

Hi, Chiranjeevi

This issue only happened in one of our customer enviroment.

I have some questions about it:
1. There is any hint from the ODBC debug logs that I provided?
2. Is this issue possible caused by customer's AD domain policy? As I was told that there are some machines in that customer will restart every Mid-night and those machines never have this problem.
3. Is there a way to get detail logs about the authenticate process? Or any other debug method/guideline help to find the root cause?

Hi Gavin,

What is the exact version of Connector/ODBC 5.3.x you are using?

Please note that using Windows authentication requires setting additional options in the DSN (click "Details >>", the option is in Connection Tab):

 1. Plugin Directory
 2. Authentication

The ODBC version is 5.3.4

I can not find the related options setting in Connection tab. Please see my attchment mysql_odbc.png.

connect tab of mysql odbc connector

Attachment: mysql_odbc.png (image/png, text), 54.50 KiB.

And what I wonder is why it works sometime but not works sometime with the same AD user login the same machine.

I know it may hard to reproduce. If possible, can you give some guide on how to debug and how to find the root cause?

we can find in Details>> Connection tab

Attachment: Details.JPG (image/jpeg, text), 89.92 KiB.

Hi, Chiranjeevi

Can you kindly try with Excel 2010? We have this problem with Excel 2010.

Hello,

Any progress about that?

Hello  Gavin Lin,

Thank you for your feedback.
I could not repeat the issue at our end using with Connector / ODBC 5.3.10, MySQL 5.6.39 and Excel 2016 version with Domain users with Windows Native Authentication.

Thank you for your interest in MySQL.

Thanks,
Chiranjeevi.

Hello

This issue is still going on.
Is there an update on this?
Is there anything else we can do to get more logs for you to review to?

Thanks

No more update. Please close it.