← Back to team overview

maria-discuss team mailing list archive

mysql_native_password in mysql.user WAS Re: SHOW GRANTS change?

 

Actually (redux),

… once I did a FLUSH PRIVILEGES, this behaved as expected.

This seems like a pretty big “gotcha” of MySQL -> MariaDB upgrades. Should MariaDB not accept “mysql_native_password” as a value in that column?

-FG

On 13 Apr 2015 3:02 PM, Felipe Gasper wrote:
Actually, after I did:

update mysql.user set plugin='mysql_native_password' where user='newguy'

… it did NOT fix the SHOW GRANTS issue.

“SHOW GRANTS FOR 'newguy'@'localhost'” still shows a password, whereas
“SHOW GRANTS FOR 'dbguy'@'localhost'” does not.

-FG

On 13 Apr 2015 2:49 PM, Felipe Gasper wrote:
Hi Sergei!

     Thanks for your quick reply! Here is the output of that command:

======================
MariaDB [(none)]> select * from mysql.user where user='dbguy' \G
*************************** 1. row ***************************
                   Host: localhost
                   User: dbguy
               Password: *3D4FD9A495C3E81883E1A42AD351871F74F7CAA9
            Select_priv: N
            Insert_priv: N
            Update_priv: N
            Delete_priv: N
            Create_priv: N
              Drop_priv: N
            Reload_priv: N
          Shutdown_priv: N
           Process_priv: N
              File_priv: N
             Grant_priv: N
        References_priv: N
             Index_priv: N
             Alter_priv: N
           Show_db_priv: N
             Super_priv: N
  Create_tmp_table_priv: N
       Lock_tables_priv: N
           Execute_priv: N
        Repl_slave_priv: N
       Repl_client_priv: N
       Create_view_priv: N
         Show_view_priv: N
    Create_routine_priv: N
     Alter_routine_priv: N
       Create_user_priv: N
             Event_priv: N
           Trigger_priv: N
Create_tablespace_priv: N
               ssl_type:
             ssl_cipher:
            x509_issuer:
           x509_subject:
          max_questions: 0
            max_updates: 0
        max_connections: 0
   max_user_connections: 0
                 plugin: mysql_native_password
  authentication_string:
       password_expired: N
                is_role: N
1 row in set (0.00 sec)
==================

     Also, here is the output for the other user, the one that SHOW
GRANTS does show as having a password:

==================
MariaDB [(none)]> select * from mysql.user where user='newguy' and
host='localhost' \G
*************************** 1. row ***************************
                   Host: localhost
                   User: newguy
               Password: *3D4FD9A495C3E81883E1A42AD351871F74F7CAA9
            Select_priv: N
            Insert_priv: N
            Update_priv: N
            Delete_priv: N
            Create_priv: N
              Drop_priv: N
            Reload_priv: N
          Shutdown_priv: N
           Process_priv: N
              File_priv: N
             Grant_priv: N
        References_priv: N
             Index_priv: N
             Alter_priv: N
           Show_db_priv: N
             Super_priv: N
  Create_tmp_table_priv: N
       Lock_tables_priv: N
           Execute_priv: N
        Repl_slave_priv: N
       Repl_client_priv: N
       Create_view_priv: N
         Show_view_priv: N
    Create_routine_priv: N
     Alter_routine_priv: N
       Create_user_priv: N
             Event_priv: N
           Trigger_priv: N
Create_tablespace_priv: N
               ssl_type:
             ssl_cipher:
            x509_issuer:
           x509_subject:
          max_questions: 0
            max_updates: 0
        max_connections: 0
   max_user_connections: 0
                 plugin:
  authentication_string:
       password_expired: N
                is_role: N
==================

     I see that the “plugin” is different … is that maybe a culprit?

-FG

On 13 Apr 2015 2:43 PM, Sergei Golubchik wrote:
Hi, Felipe!

On Apr 13, Felipe Gasper wrote:
Note: I believe “dbguy” came from a My5.6 -> Ma10.0 upgrade.

Is it possible that something in MariaDB isn’t reading MySQL stuff
correctly?

Could be. There was one issue in the way MySQL started confusing a
password and the authentication string for plugins.

Could you show the complete line for that user?
select * from mysql.user where user='dbguy' \G

Thanks!

Regards,
Sergei

-FG

On 13 Apr 2015 2:14 PM, Felipe Gasper wrote:
Dear Guillaume,

      This is what I see:

----------------
MariaDB [(none)]> select host, password from mysql.user where
user='dbguy';
+-----------+-------------------------------------------+
| host      | password                                  |
+-----------+-------------------------------------------+
| localhost | *3D4FD9A495C3E81883E1A42AD351871F74F7CAA9 |
+-----------+-------------------------------------------+
1 row in set (0.00 sec)

MariaDB [(none)]> show grants for 'dbguy'@'localhost';
+----------------------------------------------------------------+
| Grants for dbguy@localhost                                     |
+----------------------------------------------------------------+
| GRANT USAGE ON *.* TO 'dbguy'@'localhost'                      |
| GRANT ALL PRIVILEGES ON `dbguy\_goal`.* TO 'dbguy'@'localhost' |
+----------------------------------------------------------------+
2 rows in set (0.00 sec)

MariaDB [(none)]> select user();
+----------------+
| user()         |
+----------------+
| root@localhost |
+----------------+
1 row in set (0.00 sec)
---------------

      That hash is the hash of the string '234wer'.

      There does seem to be a bug here … ?

-FG


_______________________________________________
Mailing list: https://launchpad.net/~maria-discuss
Post to     : maria-discuss@xxxxxxxxxxxxxxxxxxx
Unsubscribe : https://launchpad.net/~maria-discuss
More help   : https://help.launchpad.net/ListHelp


_______________________________________________
Mailing list: https://launchpad.net/~maria-discuss
Post to     : maria-discuss@xxxxxxxxxxxxxxxxxxx
Unsubscribe : https://launchpad.net/~maria-discuss
More help   : https://help.launchpad.net/ListHelp



Follow ups

References