mirror of
https://github.com/MariaDB/server.git
synced 2025-01-16 20:12:31 +01:00
0253ea7f22
Also fixes: MDEV-21487: Implement option for mysql_upgrade that allows root@localhost to be replaced MDEV-21486: Implement option for mysql_install_db that allows root@localhost to be replaced Add user mariadb.sys to be definer of user view (and has right on underlying table global_priv for required operation over global_priv (SELECT,UPDATE,DELETE)) Also changed definer of gis functions in case of creation, but they work with any definer so upgrade script do not try to push this change.
185 lines
6.7 KiB
Text
185 lines
6.7 KiB
Text
set global secure_auth=0;
|
|
create user natauth@localhost identified via 'mysql_native_password' using '*94BDCEBE19083CE2A1F959FD02F964C7AF4CFC29';
|
|
create user newpass@localhost identified by password '*94BDCEBE19083CE2A1F959FD02F964C7AF4CFC29';
|
|
create user newpassnat@localhost identified via 'mysql_native_password';
|
|
set password for newpassnat@localhost = '*94BDCEBE19083CE2A1F959FD02F964C7AF4CFC29';
|
|
create user oldauth@localhost identified with 'mysql_old_password' using '378b243e220ca493';
|
|
create user oldpass@localhost identified by password '378b243e220ca493';
|
|
create user oldpassold@localhost identified with 'mysql_old_password';
|
|
set password for oldpassold@localhost = '378b243e220ca493';
|
|
select user, host, password, plugin, authentication_string from mysql.user where user != 'root';
|
|
User Host Password plugin authentication_string
|
|
mariadb.sys localhost mysql_native_password
|
|
natauth localhost *94BDCEBE19083CE2A1F959FD02F964C7AF4CFC29 mysql_native_password *94BDCEBE19083CE2A1F959FD02F964C7AF4CFC29
|
|
newpass localhost *94BDCEBE19083CE2A1F959FD02F964C7AF4CFC29 mysql_native_password *94BDCEBE19083CE2A1F959FD02F964C7AF4CFC29
|
|
newpassnat localhost *94BDCEBE19083CE2A1F959FD02F964C7AF4CFC29 mysql_native_password *94BDCEBE19083CE2A1F959FD02F964C7AF4CFC29
|
|
oldauth localhost 378b243e220ca493 mysql_old_password 378b243e220ca493
|
|
oldpass localhost 378b243e220ca493 mysql_old_password 378b243e220ca493
|
|
oldpassold localhost 378b243e220ca493 mysql_old_password 378b243e220ca493
|
|
connect con,localhost,natauth,test,;
|
|
select current_user();
|
|
current_user()
|
|
natauth@localhost
|
|
disconnect con;
|
|
connect con,localhost,newpass,test,;
|
|
select current_user();
|
|
current_user()
|
|
newpass@localhost
|
|
disconnect con;
|
|
connect con,localhost,newpassnat,test,;
|
|
select current_user();
|
|
current_user()
|
|
newpassnat@localhost
|
|
disconnect con;
|
|
connect con,localhost,oldauth,test,;
|
|
select current_user();
|
|
current_user()
|
|
oldauth@localhost
|
|
disconnect con;
|
|
connect con,localhost,oldpass,test,;
|
|
select current_user();
|
|
current_user()
|
|
oldpass@localhost
|
|
disconnect con;
|
|
connect con,localhost,oldpassold,test,;
|
|
select current_user();
|
|
current_user()
|
|
oldpassold@localhost
|
|
disconnect con;
|
|
connection default;
|
|
flush privileges;
|
|
connect con,localhost,natauth,test,;
|
|
select current_user();
|
|
current_user()
|
|
natauth@localhost
|
|
disconnect con;
|
|
connect con,localhost,newpass,test,;
|
|
select current_user();
|
|
current_user()
|
|
newpass@localhost
|
|
disconnect con;
|
|
connect con,localhost,newpassnat,test,;
|
|
select current_user();
|
|
current_user()
|
|
newpassnat@localhost
|
|
disconnect con;
|
|
connect con,localhost,oldauth,test,;
|
|
select current_user();
|
|
current_user()
|
|
oldauth@localhost
|
|
disconnect con;
|
|
connect con,localhost,oldpass,test,;
|
|
select current_user();
|
|
current_user()
|
|
oldpass@localhost
|
|
disconnect con;
|
|
connect con,localhost,oldpassold,test,;
|
|
select current_user();
|
|
current_user()
|
|
oldpassold@localhost
|
|
disconnect con;
|
|
connection default;
|
|
set password for natauth@localhost = PASSWORD('test2');
|
|
set password for newpass@localhost = PASSWORD('test2');
|
|
set password for newpassnat@localhost = PASSWORD('test2');
|
|
set password for oldauth@localhost = PASSWORD('test2');
|
|
set password for oldpass@localhost = PASSWORD('test2');
|
|
set password for oldpassold@localhost = PASSWORD('test2');
|
|
select user, host, password, plugin, authentication_string from mysql.user where user != 'root';
|
|
User Host Password plugin authentication_string
|
|
mariadb.sys localhost mysql_native_password
|
|
natauth localhost *7CEB3FDE5F7A9C4CE5FBE610D7D8EDA62EBE5F4E mysql_native_password *7CEB3FDE5F7A9C4CE5FBE610D7D8EDA62EBE5F4E
|
|
newpass localhost *7CEB3FDE5F7A9C4CE5FBE610D7D8EDA62EBE5F4E mysql_native_password *7CEB3FDE5F7A9C4CE5FBE610D7D8EDA62EBE5F4E
|
|
newpassnat localhost *7CEB3FDE5F7A9C4CE5FBE610D7D8EDA62EBE5F4E mysql_native_password *7CEB3FDE5F7A9C4CE5FBE610D7D8EDA62EBE5F4E
|
|
oldauth localhost *7CEB3FDE5F7A9C4CE5FBE610D7D8EDA62EBE5F4E mysql_native_password *7CEB3FDE5F7A9C4CE5FBE610D7D8EDA62EBE5F4E
|
|
oldpass localhost *7CEB3FDE5F7A9C4CE5FBE610D7D8EDA62EBE5F4E mysql_native_password *7CEB3FDE5F7A9C4CE5FBE610D7D8EDA62EBE5F4E
|
|
oldpassold localhost *7CEB3FDE5F7A9C4CE5FBE610D7D8EDA62EBE5F4E mysql_native_password *7CEB3FDE5F7A9C4CE5FBE610D7D8EDA62EBE5F4E
|
|
connect con,localhost,natauth,test2,;
|
|
select current_user();
|
|
current_user()
|
|
natauth@localhost
|
|
disconnect con;
|
|
connect con,localhost,newpass,test2,;
|
|
select current_user();
|
|
current_user()
|
|
newpass@localhost
|
|
disconnect con;
|
|
connect con,localhost,newpassnat,test2,;
|
|
select current_user();
|
|
current_user()
|
|
newpassnat@localhost
|
|
disconnect con;
|
|
connect con,localhost,oldauth,test2,;
|
|
select current_user();
|
|
current_user()
|
|
oldauth@localhost
|
|
disconnect con;
|
|
connect con,localhost,oldpass,test2,;
|
|
select current_user();
|
|
current_user()
|
|
oldpass@localhost
|
|
disconnect con;
|
|
connect con,localhost,oldpassold,test2,;
|
|
select current_user();
|
|
current_user()
|
|
oldpassold@localhost
|
|
disconnect con;
|
|
connection default;
|
|
flush privileges;
|
|
connect con,localhost,natauth,test2,;
|
|
select current_user();
|
|
current_user()
|
|
natauth@localhost
|
|
disconnect con;
|
|
connect con,localhost,newpass,test2,;
|
|
select current_user();
|
|
current_user()
|
|
newpass@localhost
|
|
disconnect con;
|
|
connect con,localhost,newpassnat,test2,;
|
|
select current_user();
|
|
current_user()
|
|
newpassnat@localhost
|
|
disconnect con;
|
|
connect con,localhost,oldauth,test2,;
|
|
select current_user();
|
|
current_user()
|
|
oldauth@localhost
|
|
disconnect con;
|
|
connect con,localhost,oldpass,test2,;
|
|
select current_user();
|
|
current_user()
|
|
oldpass@localhost
|
|
disconnect con;
|
|
connect con,localhost,oldpassold,test2,;
|
|
select current_user();
|
|
current_user()
|
|
oldpassold@localhost
|
|
disconnect con;
|
|
connection default;
|
|
drop user natauth@localhost, newpass@localhost, newpassnat@localhost;
|
|
drop user oldauth@localhost, oldpass@localhost, oldpassold@localhost;
|
|
set global secure_auth=default;
|
|
# switching from mysql.global_priv to mysql.user
|
|
create user foo@localhost identified with mysql_native_password;
|
|
update mysql.user set authentication_string=password('foo'), plugin='mysql_native_password' where user='foo' and host='localhost';
|
|
set password for 'foo'@'localhost' = password('bar');
|
|
flush privileges;
|
|
connect foo, localhost, foo, bar;
|
|
select user(), current_user();
|
|
user() current_user()
|
|
foo@localhost foo@localhost
|
|
show grants;
|
|
Grants for foo@localhost
|
|
GRANT USAGE ON *.* TO `foo`@`localhost` IDENTIFIED BY PASSWORD '*E8D46CE25265E545D225A8A6F1BAF642FEBEE5CB'
|
|
disconnect foo;
|
|
connection default;
|
|
select user,host,password,plugin,authentication_string from mysql.user where user='foo';
|
|
user host password plugin authentication_string
|
|
foo localhost mysql_native_password *E8D46CE25265E545D225A8A6F1BAF642FEBEE5CB
|
|
set password for 'foo'@'localhost' = '';
|
|
select user,host,password,plugin,authentication_string from mysql.user where user='foo';
|
|
user host password plugin authentication_string
|
|
foo localhost mysql_native_password
|
|
drop user foo@localhost;
|
|
# switching back from mysql.user to mysql.global_priv
|