Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-18119

upgrading from 10.3 to 10.4 can result in the password for a user to be wiped out

    XMLWordPrintable

Details

    • Bug
    • Status: Closed (View Workflow)
    • Critical
    • Resolution: Fixed
    • 10.4(EOL)
    • 10.4.3
    • None
    • OS: CentOS Linux release 7.5.1804 (Core)
      Kernel: 3.10.0-862.3.2.el7.x86_64
      Arch: x86_64
      Environment: unknown-envtype
      CPU: Intel Xeon E312xx (Sandy Bridge) w/ 4 core(s)

    Description

      Details

      Upgrading from 10.3 to 10.4 can result in the password for a user using 'mysql_native_password' to be removed.

      version 10.3

      # mysql --version
      mysql  Ver 15.1 Distrib 10.3.11-MariaDB, for Linux (x86_64) using readline 5.1
      # mysql mysql -e "select User,Host,plugin,Password,authentication_string from user where User='cptest';"
      +--------+------+-----------------------+-------------------------------------------+-----------------------+
      | User   | Host | plugin                | Password                                  | authentication_string |
      +--------+------+-----------------------+-------------------------------------------+-----------------------+
      | cptest | %    | mysql_native_password | *A8C0FBBC868C0ABC516A6CED06C02974BEC047C2 |                       |
      +--------+------+-----------------------+-------------------------------------------+-----------------------+
      

      • upgrade to 10.4

      notice that the user no longer has a password:

      # mysql --version
      mysql  Ver 15.1 Distrib 10.4.1-MariaDB, for Linux (x86_64) using readline 5.1
      # mysql mysql -e "select User,Host,plugin,Password,authentication_string from user where User='cptest';"
      +--------+------+-----------------------+----------+-----------------------+
      | User   | Host | plugin                | Password | authentication_string |
      +--------+------+-----------------------+----------+-----------------------+
      | cptest | %    | mysql_native_password |          |                       |
      +--------+------+-----------------------+----------+-----------------------+
      


      Suggested Resolution / Expected Behavior
      • I would expect that the password maintained in the Password column would either be retained upon upgrading to 10.4 or it would be migrated over to the authentication_string column if the expectation is that all passwords are maintained there

      Attachments

        Issue Links

          Activity

            People

              serg Sergei Golubchik
              t.holloway Travis
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.