From 53cdb0e0b9b1ace57b7898001f491f7ccf68ce70 Mon Sep 17 00:00:00 2001
From: Mark Hyde <mark.hyde@rackspace.co.uk>
Date: Tue, 28 Nov 2017 13:11:39 +0000
Subject: [PATCH] Ignore password check for auth_pam_compat plugin

- Users authenticating via auth_pam_compat will use pam for
authentication rather than the mysql password field, so the latter is
expected to be empty.
---
 mysqltuner.pl | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/mysqltuner.pl b/mysqltuner.pl
index 05c422d..117fc52 100755
--- a/mysqltuner.pl
+++ b/mysqltuner.pl
@@ -1207,7 +1207,7 @@ sub log_file_recommandations {
     my $nbErrLog  = 0;
     my @lastShutdowns;
     my @lastStarts;
-    
+
     open( my $fh, '<', $myvar{'log_error'} ) or die "Can't open $myvar{'log_error'} for read: $!";
 
     while ( my $logLi = <$fh> ) {
@@ -1221,7 +1221,7 @@ sub log_file_recommandations {
         push @lastStarts, $logLi if $logLi =~ /ready for connections/;
     }
     close $fh;
-    
+
     if ( $nbWarnLog > 0 ) {
         badprint "$myvar{'log_error'} contains $nbWarnLog warning(s).";
         push @generalrec,
@@ -1716,7 +1716,7 @@ sub security_recommendations {
     # Looking for Empty Password
     if ( mysql_version_ge( 5, 5 ) ) {
         @mysqlstatlist = select_array
-"SELECT CONCAT(user, '\@', host) FROM mysql.user WHERE ($PASS_COLUMN_NAME = '' OR $PASS_COLUMN_NAME IS NULL) AND plugin NOT IN ('unix_socket', 'win_socket')";
+"SELECT CONCAT(user, '\@', host) FROM mysql.user WHERE ($PASS_COLUMN_NAME = '' OR $PASS_COLUMN_NAME IS NULL) AND plugin NOT IN ('unix_socket', 'win_socket', 'auth_pam_compat')";
     }
     else {
         @mysqlstatlist = select_array