Thanks, yes, I think that would solve my issue too. auth_pam uses dialog.so, but auth_pam_compat uses mysql_clear_password. I was hoping to use auth_pam_compat for authentication and then use SSL connections to encrypt the transmission of the password.