Details
-
Bug
-
Status: Closed (View Workflow)
-
Major
-
Resolution: Duplicate
-
10.3.17
-
OS . RHEL 8.2 x86_64
Description
Password's are getting logged while installing openstack in the event of creating users of the openstack component.
We have enabled following parameters in the '/etc/my.cnf.d/server.cnf' file
'plugin_load_add', 'sql_errlog'
'sql_error_log_rotate', '1'
'slow_query_log', '1'
'long_query_time' 10
Here is the db log after the installation of openstack where the passwords are getting printed
Version: '10.3.17-MariaDB-log' socket: '/var/lib/mysql/mysql.sock' port: 50110 MariaDB Server
2020-10-21 10:16:45 root[root] @ localhost [] ERROR 1396: Operation CREATE USER failed for 'novadb'@'localhost' : CREATE USER 'novadb'@'localhost' IDENTIFIED BY 'l9OxJ46JNixySVWDiV58'
2020-10-21 10:16:45 root[root] @ localhost [] ERROR 1396: Operation CREATE USER failed for 'novadb'@'127.0.0.1' : CREATE USER 'novadb'@'127.0.0.1' IDENTIFIED BY 'l9OxJ46JNixySVWDiV58'
2020-10-21 10:16:45 root[root] @ localhost [] ERROR 1396: Operation CREATE USER failed for 'novadb'@'::1' : CREATE USER 'novadb'@'::1' IDENTIFIED BY 'l9OxJ46JNixySVWDiV58'
Attachments
Issue Links
- duplicates
-
MDEV-9042 CREATE USER passwords being written to bin log in clear text
- Open
- relates to
-
MDEV-10584 Obscure plain text passwords from server logs
- Open