mirror of
https://github.com/MariaDB/server.git
synced 2025-01-16 03:52:35 +01:00
7c40996cc8
Support SET PASSWORD for authentication plugins. Authentication plugin API is extended with two optional methods: * hash_password() is used to compute a password hash (or digest) from the plain-text password. This digest will be stored in mysql.user table * preprocess_hash() is used to convert this digest into some memory representation that can be later used to authenticate a user. Build-in plugins convert the hash from hexadecimal or base64 to binary, to avoid doing it on every authentication attempt. Note a change in behavior: when loading privileges (on startup or on FLUSH PRIVILEGES) an account with an unknown plugin was loaded with a warning (e.g. "Plugin 'foo' is not loaded"). But such an account could not be used for authentication until the plugin is installed. Now an account like that will not be loaded at all (with a warning, still). Indeed, without plugin's preprocess_hash() method the server cannot know how to load an account. Thus, if a new authentication plugin is installed run-time, one might need FLUSH PRIVILEGES to activate all existing accounts that were using this new plugin.
34 lines
933 B
Text
34 lines
933 B
Text
--source include/not_embedded.inc
|
|
|
|
create user foo;
|
|
show create user foo;
|
|
|
|
create user foo@test;
|
|
show create user foo@test;
|
|
|
|
create user foo2@test identified by 'password';
|
|
show create user foo2@test;
|
|
|
|
alter user foo2@test identified with 'mysql_old_password' as '0123456789ABCDEF';
|
|
show create user foo2@test;
|
|
|
|
create user foo3@test require SSL;
|
|
show create user foo3@test;
|
|
|
|
create user foo4@test require cipher 'text' issuer 'foo_issuer' subject 'foo_subject';
|
|
show create user foo4@test;
|
|
|
|
create user foo5@test require SSL
|
|
with MAX_QUERIES_PER_HOUR 10
|
|
MAX_UPDATES_PER_HOUR 20
|
|
MAX_CONNECTIONS_PER_HOUR 30
|
|
MAX_USER_CONNECTIONS 40
|
|
MAX_STATEMENT_TIME 0.5;
|
|
show create user foo5@test;
|
|
|
|
drop user foo5@test;
|
|
drop user foo4@test;
|
|
drop user foo3@test;
|
|
drop user foo2@test;
|
|
drop user foo@test;
|
|
drop user foo;
|