mirror of
https://github.com/MariaDB/server.git
synced 2025-12-17 01:35:43 +01:00
125e172a2b
Allow passwordless login in addition to usual login with password, when creating 'root' user during install. The effect of that change is that "local administrators" group are allowed to connect as root user. This is done via gssapi authentication plugin. Clients that are not aware of gssapi client plugin, can still login with password credentials.
32 lines
1.2 KiB
Text
32 lines
1.2 KiB
Text
# gssapi,password
|
|
CREATE USER 'nosuchuser' IDENTIFIED WITH gssapi OR mysql_native_password as password("good");
|
|
replace_result $MASTER_MYSOCK MASTER_MYSOCK $MASTER_MYPORT MASTER_MYPORT;
|
|
error ER_ACCESS_DENIED_ERROR;
|
|
connect (con1,localhost,nosuchuser,,);
|
|
connect (con1,localhost,nosuchuser,good,);
|
|
SELECT USER(),CURRENT_USER();
|
|
disconnect con1;
|
|
connection default;
|
|
DROP USER nosuchuser;
|
|
|
|
# password,gssapi
|
|
CREATE USER 'nosuchuser' IDENTIFIED WITH mysql_native_password as password("good") OR gssapi;
|
|
replace_result $MASTER_MYSOCK MASTER_MYSOCK $MASTER_MYPORT MASTER_MYPORT $GSSAPI_SHORTNAME GSSAPI_SHORTNAME;
|
|
error ER_ACCESS_DENIED_ERROR;
|
|
connect (con1,localhost,nosuchuser,,);
|
|
connect (con1,localhost,nosuchuser,good,);
|
|
SELECT USER(),CURRENT_USER();
|
|
disconnect con1;
|
|
connection default;
|
|
DROP USER nosuchuser;
|
|
|
|
replace_result $GSSAPI_SHORTNAME GSSAPI_SHORTNAME;
|
|
eval CREATE USER '$GSSAPI_SHORTNAME' IDENTIFIED WITH mysql_native_password as password("good") OR gssapi;
|
|
connect (con1,localhost,$GSSAPI_SHORTNAME,,);
|
|
replace_result $GSSAPI_SHORTNAME GSSAPI_SHORTNAME;
|
|
SELECT USER(),CURRENT_USER();
|
|
disconnect con1;
|
|
connection default;
|
|
replace_result $GSSAPI_SHORTNAME GSSAPI_SHORTNAME;
|
|
eval DROP USER '$GSSAPI_SHORTNAME';
|
|
|