Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-25258

SET PASSWORD command fail with wsrep api

    XMLWordPrintable

Details

    Description

      When setting an account password on one node, it's not replicated because the other nodes refuse to apply a hashed password where the requirements cannot be checked.

      Node1, where password changed.

      Node1:
      ======
      MariaDB [(none)]> SET PASSWORD FOR 'irfanpass'@'localhost' = PASSWORD('A$10abcdDCBA123456%7');
      Query OK, 0 rows affected (0.016 sec)
       
      MariaDB [(none)]>
      MariaDB [(none)]> show grants for 'irfanpass'@'localhost';
      +------------------------------------------------------------------------------------------------------------------+
      | Grants for irfanpass@localhost |
      +------------------------------------------------------------------------------------------------------------------+
      | GRANT USAGE ON *.* TO `irfanpass`@`localhost` IDENTIFIED BY PASSWORD '*5846CF4D641598B360B3562E581586155C59F65A' |
      +------------------------------------------------------------------------------------------------------------------+
      1 row in set (0.000 sec)
      

      And password not updated on rest of nodes in galera cluster.

      MariaDB [(none)]> show grants for 'irfanpass'@'localhost';
      +------------------------------------------------------------------------------------------------------------------+
      | Grants for irfanpass@localhost                                                                                   |
      +------------------------------------------------------------------------------------------------------------------+
      | GRANT USAGE ON *.* TO `irfanpass`@`localhost` IDENTIFIED BY PASSWORD '*310F5FE633BDDA20DDC8D6BD96D76E3C53FD5A86' |
      +------------------------------------------------------------------------------------------------------------------+
      1 row in set (0.000 sec)
      

      And error is logged.

      2021-03-25  8:37:22 2 [ERROR] Slave SQL: Error 'The MariaDB server is running with the --strict-password-validation option so it cannot execute this statement' on query. Default database: ''. Query: 'SET PASSWORD FOR 'irfanpass'@'localhost'='*5846CF4D641598B360B3562E581586155C59F65A'', Internal MariaDB error code: 1290
      2021-03-25  8:37:22 2 [Warning] WSREP: RBR event 1 Query apply warning: 1, 7
      2021-03-25  8:37:22 2 [Warning] WSREP: Ignoring error for TO isolated action: source: ffd63e74-8d1a-11eb-b67b-923af2b87772 version: 4 local: 0 state: APPLYING flags: 65 conn_id: 13 trx_id: -1 seqnos (l: 4, g: 7, s: 6, d: 6, ts: 23754928291917)
      

      password validation is enabled on cluster.

      +-----------------------------------------+-------+
      | Variable_name                           | Value |
      +-----------------------------------------+-------+
      | report_password                         |       |
      | simple_password_check_digits            | 1     |
      | simple_password_check_letters_same_case | 1     |
      | simple_password_check_minimal_length    | 14    |
      | simple_password_check_other_characters  | 1     |
      | strict_password_validation              | ON    |
      +-----------------------------------------+-------+
      

      Attachments

        Activity

          People

            jplindst Jan Lindström (Inactive)
            muhammad.irfan Muhammad Irfan
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.