2013-01-25 09:41:26 +01:00
|
|
|
source include/not_embedded.inc;
|
|
|
|
|
|
|
|
#
|
|
|
|
# MDEV-3909 remote user enumeration
|
|
|
|
#
|
|
|
|
# verify that for some failed login attemps (with wrong user names)
|
|
|
|
# the server requests a plugin
|
|
|
|
#
|
|
|
|
optimize table mysql.user;
|
2018-10-17 12:48:13 +02:00
|
|
|
insert ignore mysql.user (user,plugin) values ('foo','mysql_old_password'),('bar','mysql_old_password'),('baz','mysql_old_password');
|
2013-01-25 09:41:26 +01:00
|
|
|
flush privileges;
|
|
|
|
|
|
|
|
--replace_result $MASTER_MYSOCK MASTER_SOCKET $MASTER_MYPORT MASTER_PORT
|
2018-11-26 21:24:05 +01:00
|
|
|
--error ER_ACCESS_DENIED_ERROR
|
2013-01-25 09:41:26 +01:00
|
|
|
connect (fail,localhost,u1);
|
|
|
|
|
|
|
|
--replace_result $MASTER_MYSOCK MASTER_SOCKET $MASTER_MYPORT MASTER_PORT
|
2018-11-26 21:24:05 +01:00
|
|
|
--error ER_SERVER_IS_IN_SECURE_AUTH_MODE
|
2013-01-25 09:41:26 +01:00
|
|
|
connect (fail,localhost,u2);
|
|
|
|
|
|
|
|
--replace_result $MASTER_MYSOCK MASTER_SOCKET $MASTER_MYPORT MASTER_PORT
|
2018-11-26 21:24:05 +01:00
|
|
|
--error ER_SERVER_IS_IN_SECURE_AUTH_MODE
|
2013-01-25 09:41:26 +01:00
|
|
|
connect (fail,localhost,u2,password);
|
|
|
|
|
2018-11-26 21:24:05 +01:00
|
|
|
--error ER_ACCESS_DENIED_ERROR
|
2013-01-25 09:41:26 +01:00
|
|
|
change_user u1;
|
|
|
|
|
2018-11-26 21:24:05 +01:00
|
|
|
--error ER_SERVER_IS_IN_SECURE_AUTH_MODE
|
2013-01-25 09:41:26 +01:00
|
|
|
change_user u2;
|
|
|
|
|
2018-11-26 21:24:05 +01:00
|
|
|
--error ER_SERVER_IS_IN_SECURE_AUTH_MODE
|
2013-01-25 09:41:26 +01:00
|
|
|
change_user u2,password;
|
|
|
|
|
2018-10-17 12:48:13 +02:00
|
|
|
delete from mysql.user where plugin = 'mysql_old_password';
|
2013-01-25 09:41:26 +01:00
|
|
|
flush privileges;
|
|
|
|
|
|
|
|
|