Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-18119

upgrading from 10.3 to 10.4 can result in the password for a user to be wiped out

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed (View Workflow)
    • Priority: Critical
    • Resolution: Fixed
    • Affects Version/s: 10.4
    • Fix Version/s: 10.4.3
    • Labels:
      None
    • Environment:
      OS: CentOS Linux release 7.5.1804 (Core)
      Kernel: 3.10.0-862.3.2.el7.x86_64
      Arch: x86_64
      Environment: unknown-envtype
      CPU: Intel Xeon E312xx (Sandy Bridge) w/ 4 core(s)

      Description

      Details

      Upgrading from 10.3 to 10.4 can result in the password for a user using 'mysql_native_password' to be removed.

      version 10.3

      # mysql --version
      mysql  Ver 15.1 Distrib 10.3.11-MariaDB, for Linux (x86_64) using readline 5.1
      # mysql mysql -e "select User,Host,plugin,Password,authentication_string from user where User='cptest';"
      +--------+------+-----------------------+-------------------------------------------+-----------------------+
      | User   | Host | plugin                | Password                                  | authentication_string |
      +--------+------+-----------------------+-------------------------------------------+-----------------------+
      | cptest | %    | mysql_native_password | *A8C0FBBC868C0ABC516A6CED06C02974BEC047C2 |                       |
      +--------+------+-----------------------+-------------------------------------------+-----------------------+
      

      • upgrade to 10.4

      notice that the user no longer has a password:

      # mysql --version
      mysql  Ver 15.1 Distrib 10.4.1-MariaDB, for Linux (x86_64) using readline 5.1
      # mysql mysql -e "select User,Host,plugin,Password,authentication_string from user where User='cptest';"
      +--------+------+-----------------------+----------+-----------------------+
      | User   | Host | plugin                | Password | authentication_string |
      +--------+------+-----------------------+----------+-----------------------+
      | cptest | %    | mysql_native_password |          |                       |
      +--------+------+-----------------------+----------+-----------------------+
      


      Suggested Resolution / Expected Behavior
      • I would expect that the password maintained in the Password column would either be retained upon upgrading to 10.4 or it would be migrated over to the authentication_string column if the expectation is that all passwords are maintained there

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              serg Sergei Golubchik
              Reporter:
              t.holloway Travis
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: