Merge lp:~hrvojem/percona-pam-for-mysql/bug907483 into lp:percona-pam-for-mysql

[Hrvoje Matijakovic]

[Laurynas Biveinis (laurynas-biveinis)]

It's better to suggest shadow group config first if possible, and leave running mysqld under root for testing only/as a last resort.

review: Needs Fixing

[Laurynas Biveinis (laurynas-biveinis)]

LGTM, thank you.

review: Approve

=== modified file 'doc/source/faq.rst'
--- doc/source/faq.rst	2011-11-14 04:05:18 +0000
+++ doc/source/faq.rst	2012-01-27 14:12:25 +0000
@@ -27,4 +27,16 @@
 Can I use the PAM plugin to authenticate against /etc/shadow?
 =============================================================
 
-Yes, but you will need to run mysqld as root so that the PAM libraries such as 'pam_unix.so` can access /etc/shadow.
+Yes, you need to add the mysql user to the shadow group. Because PAM libraries, such as 'pam_unix.so', need to access /etc/shadow.
+
+For example this is how you can do it in *Ubuntu*: ::
+
+   root@lucid64:/var/lib/mysql# getent group shadow
+   shadow:x:42:mysql
+
+   root@lucid64:/var/lib/mysql# ls -alhs /etc/shadow
+   4.0K -rw-r----- 1 root shadow 912 Dec 21 10:39 /etc/shadow
+
+After you restart mysqld for changes to take effect, pam_unix authentication will work.
+
+The other option is to run mysqld as root. This should be used for testing only or as a last resort method.
 
=== modified file 'doc/source/installation.rst'
--- doc/source/installation.rst	2011-11-14 04:05:18 +0000
+++ doc/source/installation.rst	2012-01-27 14:12:25 +0000
@@ -42,7 +42,7 @@
 
 Most packages should do this for you, so this is likely only required with the binary tarballs.
 
-  In order to load the plugin into the working server, issue the following command: ::
+In order to load the plugin into the working server, issue the following command: ::
 
  mysql> INSTALL PLUGIN auth_pam_server SONAME 'auth_pam.so';