Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-22486

mysql_secure_installation cannot work without root user in the database

Details

    • Bug
    • Status: Open (View Workflow)
    • Minor
    • Resolution: Unresolved
    • 10.4(EOL), 10.5
    • 10.5
    • Scripts & Clients
    • None

    Description

      Starting from 10.4, mysql_secure_installation gets stuck at the very beginning of execution if the database doesn't have root@localhost and the script is executed under another superuser.

      It happens because after successfully connecting under the other user, it immediately runs show create user root@localhost, gets an error, interprets it as a failure to connect, and goes into the loop asking again for a password:

      mysql_secure_installation from 10.4 7f03a933, console output

      		 
      Enter current password for root (enter for none): 
      ERROR 1133 (28000) at line 1: Can't find any matching row in the user table
      		 
      Enter current password for root (enter for none): 
      ERROR 1133 (28000) at line 1: Can't find any matching row in the user table
      		 
      Enter current password for root (enter for none): 
      ERROR 1133 (28000) at line 1: Can't find any matching row in the user table

      10.4 7f03a933, general log

      		 
      200506 21:58:39     16 Connect  elenst@localhost as anonymous on 
                          16 Query    show create user root@localhost
      		 
                          16 Quit     
      200506 22:00:11     17 Connect  elenst@localhost as anonymous on 
                          17 Query    show create user root@localhost
      		 
                          17 Quit     
      200506 22:00:13     18 Connect  elenst@localhost as anonymous on 
                          18 Query    show create user root@localhost

      Earlier it wouldn't matter much, because most of operations couldn't be performed anyway due to the non-existing owner of mysql.user. Now with the trend of allowing removal of root@localhost (MDEV-19650), it becomes an issue.

      Please also note the cosmetic problems, hardcoded "root" in messages like

      Enter current password for root

      where it is really asking for a password of a user it is going to pass to MariaDB client.

      Attachments

        Issue Links

          relates to

          Bug - A problem which impairs or prevents the functions of the product. MDEV-19650 Privilege bug on MariaDB 10.4

          • Blocker - Blocks development and/or testing work, production could not run.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. MDEV-25169 Secure installation with normal user fails to accept empty root password

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Activity

            Transition Time In Source Status Execution Times
            Anel Husakovic made transition -
            Open Confirmed
            		334d 20h 10m 2
            Anel Husakovic made transition -
            Confirmed In Review
            		47s 2
            Anel Husakovic made transition -
            Stalled In Review
            		177d 11h 50m 2
            Daniel Black made transition -
            In Review Stalled
            		123d 4h 57m 4
            Daniel Black made transition -
            Stalled Open
            		13d 20h 53m 2

            People

              Unassigned Unassigned
              elenst Elena Stepanova
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

                Created:
                Updated:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.