Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-18119

upgrading from 10.3 to 10.4 can result in the password for a user to be wiped out

Details

    • Bug
    • Status: Closed (View Workflow)
    • Critical
    • Resolution: Fixed
    • 10.4(EOL)
    • 10.4.3
    • Authentication and Privilege System
    • None
    • OS: CentOS Linux release 7.5.1804 (Core)
      Kernel: 3.10.0-862.3.2.el7.x86_64
      Arch: x86_64
      Environment: unknown-envtype
      CPU: Intel Xeon E312xx (Sandy Bridge) w/ 4 core(s)

    Description

      Details

      Upgrading from 10.3 to 10.4 can result in the password for a user using 'mysql_native_password' to be removed.

      version 10.3

      # mysql --version
      		 
      mysql  Ver 15.1 Distrib 10.3.11-MariaDB, for Linux (x86_64) using readline 5.1
      		 
      # mysql mysql -e "select User,Host,plugin,Password,authentication_string from user where User='cptest';"
      		 
      +--------+------+-----------------------+-------------------------------------------+-----------------------+
      		 
      | User   | Host | plugin                | Password                                  | authentication_string |
      		 
      +--------+------+-----------------------+-------------------------------------------+-----------------------+
      		 
      | cptest | %    | mysql_native_password | *A8C0FBBC868C0ABC516A6CED06C02974BEC047C2 |                       |
      		 
      +--------+------+-----------------------+-------------------------------------------+-----------------------+

      • upgrade to 10.4

      notice that the user no longer has a password:

      # mysql --version
      		 
      mysql  Ver 15.1 Distrib 10.4.1-MariaDB, for Linux (x86_64) using readline 5.1
      		 
      # mysql mysql -e "select User,Host,plugin,Password,authentication_string from user where User='cptest';"
      		 
      +--------+------+-----------------------+----------+-----------------------+
      		 
      | User   | Host | plugin                | Password | authentication_string |
      		 
      +--------+------+-----------------------+----------+-----------------------+
      		 
      | cptest | %    | mysql_native_password |          |                       |
      		 
      +--------+------+-----------------------+----------+-----------------------+

      Suggested Resolution / Expected Behavior
      • I would expect that the password maintained in the Password column would either be retained upon upgrading to 10.4 or it would be migrated over to the authentication_string column if the expectation is that all passwords are maintained there

      Attachments

        Issue Links

          relates to

          Bug - A problem which impairs or prevents the functions of the product. MDEV-18118 MySQL users can break if using mysql_native_plugin in version 10.2

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Activity

            Transition Time In Source Status Execution Times
            Elena Stepanova made transition -
            Open Confirmed
            		1d 4h 40m 1
            Sergei Golubchik made transition -
            Confirmed In Progress
            		5d 19h 11m 1
            Sergei Golubchik made transition -
            In Progress Stalled
            		43m 30s 1
            Sergei Golubchik made transition -
            Stalled Closed
            		25d 20h 1m 1

            People

              serg Sergei Golubchik
              t.holloway Travis
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.