mirror of
https://github.com/MariaDB/server.git
synced 2026-01-30 15:29:07 +01:00
125e172a2b
Allow passwordless login in addition to usual login with password, when creating 'root' user during install. The effect of that change is that "local administrators" group are allowed to connect as root user. This is done via gssapi authentication plugin. Clients that are not aware of gssapi client plugin, can still login with password credentials.
30 lines
1.2 KiB
Text
30 lines
1.2 KiB
Text
CREATE USER 'nosuchuser' IDENTIFIED WITH gssapi OR mysql_native_password as password("good");
|
|
connect(localhost,nosuchuser,,test,MASTER_MYPORT,MASTER_MYSOCK);
|
|
connect con1,localhost,nosuchuser,,;
|
|
ERROR 28000: Access denied for user 'nosuchuser'@'localhost' (using password: NO)
|
|
connect con1,localhost,nosuchuser,good,;
|
|
SELECT USER(),CURRENT_USER();
|
|
USER() CURRENT_USER()
|
|
nosuchuser@localhost nosuchuser@%
|
|
disconnect con1;
|
|
connection default;
|
|
DROP USER nosuchuser;
|
|
CREATE USER 'nosuchuser' IDENTIFIED WITH mysql_native_password as password("good") OR gssapi;
|
|
connect(localhost,nosuchuser,,test,MASTER_MYPORT,MASTER_MYSOCK);
|
|
connect con1,localhost,nosuchuser,,;
|
|
ERROR 28000: GSSAPI name mismatch, requested 'nosuchuser', actual name 'GSSAPI_SHORTNAME'
|
|
connect con1,localhost,nosuchuser,good,;
|
|
SELECT USER(),CURRENT_USER();
|
|
USER() CURRENT_USER()
|
|
nosuchuser@localhost nosuchuser@%
|
|
disconnect con1;
|
|
connection default;
|
|
DROP USER nosuchuser;
|
|
CREATE USER 'GSSAPI_SHORTNAME' IDENTIFIED WITH mysql_native_password as password("good") OR gssapi;
|
|
connect con1,localhost,$GSSAPI_SHORTNAME,,;
|
|
SELECT USER(),CURRENT_USER();
|
|
USER() CURRENT_USER()
|
|
GSSAPI_SHORTNAME@localhost GSSAPI_SHORTNAME@%
|
|
disconnect con1;
|
|
connection default;
|
|
DROP USER 'GSSAPI_SHORTNAME';
|