Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-24122

Minor updates to MariaDB 10.2/10.3 seems to be adding a DEFAULT ROLE to the show grants command that is invalid.

    XMLWordPrintable

    Details

      Description

      Possibly related to the recent change in: MDEV-22313

      The default role is set to 0 (which is incorrect).

      # mysql mysql -se "show grants for 'user1'@'localhost';"
      Grants for user1@localhost
      GRANT USAGE ON *.* TO `user1`@`localhost` IDENTIFIED BY PASSWORD '*REDACTED'
      SET DEFAULT ROLE 0 FOR 'user1'@'localhost'
      

      This causes database users to have invalid grants.

      Reading access rights for the cPanel user "user1" from live data:
       MariaDB/MySQL ...Invalid grant string: SET DEFAULT ROLE 0 FOR 'user1'@'localhost'
      

      This breaks the cPanel "Databases" interface. (Screenshot attached) This does not occur for all servers that update to these versions and the cause of some of them breaking has yet to be determined.

      Downgrading solves the issue. Additionally, another workaround that we have used is to set the default role to NONE.

      MariaDB [(none)]> SET DEFAULT ROLE none FOR 'user1'@'localhost';
       Query OK, 0 rows affected (0.000 sec)
      

        Attachments

        1. affected_datadir.tar.xz.partaa
          5.89 MB
          Hans Borresen
        2. affected_datadir.tar.xz.partab
          5.89 MB
          Hans Borresen
        3. Screen Shot 2020-11-04 at 1.37.00 AM.png
          28 kB
          cPanel Senior Tech's

          Issue Links

            Activity

              People

              Assignee:
              danblack Daniel Black
              Reporter:
              cPanelSTA cPanel Senior Tech's
              Votes:
              0 Vote for this issue
              Watchers:
              8 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:

                  Git Integration