Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-35668

--bootstrap user don't have proxy privs so cannot grant it

Details

    Description

      In attempting to use --extra-file (MDEV-27435) to initialize container users without as many mariadb restarts,

      /tmp/t.t

      		 
      FLUSH PRIVILEGES;
      		 
      CREATE USER 'root'@'%' IDENTIFIED BY 'bob' ;
      		 
      GRANT ALL ON *.* TO 'root'@'%' WITH GRANT OPTION ;
      		 
      GRANT PROXY ON ''@'%' TO 'root'@'%' WITH GRANT OPTION;


      $ mkdir -p /tmp/${PWD##*/}-datadir && rr record -- scripts/mariadb-install-db --no-defaults --srcdir=$OLDPWD --builddir=$PWD --datadir=/tmp/${PWD##*/}-datadir --verbose --extra-file=/tmp/t.t
      		 
      rr: Saving execution to trace directory `/home/dan/.local/share/rr/mariadb-install-db-0'.
      		 
      Installing MariaDB/MySQL system tables in '/tmp/build-mariadb-server-10.11-datadir' ...
      		 
      2024-12-17 16:50:05 0 [Note] Starting MariaDB 10.11.11-MariaDB source revision e7c6cdd8429ddbff945d1481df744495bbb46e54 server_uid enNnnQxEDTHTmtOjZVL8QXFFEN0= as process 620072
      		 
      2024-12-17 16:50:05 0 [Note] InnoDB: The first data file './ibdata1' did not exist. A new tablespace will be created!
      		 
      2024-12-17 16:50:05 0 [Note] InnoDB: Compressed tables use zlib 1.3.1.zlib-ng
      		 
      2024-12-17 16:50:05 0 [Note] InnoDB: Number of transaction pools: 1
      		 
      2024-12-17 16:50:05 0 [Note] InnoDB: Using AVX512 instructions
      		 
      2024-12-17 16:50:05 0 [Warning] mariadbd: io_uring_queue_init() failed with errno 2
      		 
      2024-12-17 16:50:05 0 [Warning] InnoDB: liburing disabled: falling back to innodb_use_native_aio=OFF
      		 
      2024-12-17 16:50:05 0 [Note] InnoDB: Initializing buffer pool, total size = 128.000MiB, chunk size = 2.000MiB
      		 
      2024-12-17 16:50:05 0 [Note] InnoDB: Initialized memory pressure event listener
      		 
      2024-12-17 16:50:05 0 [Note] InnoDB: Completed initialization of buffer pool
      		 
      2024-12-17 16:50:05 0 [Note] InnoDB: Setting file './ibdata1' size to 12.000MiB. Physically writing the file full; Please wait ...
      		 
      2024-12-17 16:50:05 0 [Note] InnoDB: File './ibdata1' size is now 12.000MiB.
      		 
      2024-12-17 16:50:06 0 [Note] InnoDB: Buffered log writes (block size=512 bytes)
      		 
      2024-12-17 16:50:06 0 [Note] InnoDB: Doublewrite buffer not found: creating new
      		 
      2024-12-17 16:50:06 0 [Note] InnoDB: 128 rollback segments are active.
      		 
      2024-12-17 16:50:06 0 [Note] InnoDB: Setting file './ibtmp1' size to 12.000MiB. Physically writing the file full; Please wait ...
      		 
      2024-12-17 16:50:06 0 [Note] InnoDB: File './ibtmp1' size is now 12.000MiB.
      		 
      2024-12-17 16:50:06 0 [Note] InnoDB: log sequence number 0; transaction id 3
      		 
      ERROR: 1698  Access denied for user 'boot'@'connecting host'
      		 
      2024-12-17 16:50:08 0 [ERROR] Aborting

      Attachments

        Issue Links

          relates to

          Bug - A problem which impairs or prevents the functions of the product. MDEV-35569 MariaDB docker failed to start with --skip-grant-tables in cmd arguments or skip_grant_tables=ON in the configuration file

          • Major - Major loss of function.
          • Open

          Activity

            Ascending order - Click to sort in descending order
            danblack Daniel Black created issue -
            danblack Daniel Black made changes -
            Field Original Value New Value
            danblack Daniel Black added a comment -

            So a sql/sql_parse.cc:bootstrap faking sufficient authentication or

            diff --git a/sql/sql_acl.cc b/sql/sql_acl.cc
            		 
            index 949e9825dde..f62bcc8f84e 100644
            		 
            --- a/sql/sql_acl.cc
            		 
            +++ b/sql/sql_acl.cc
            		 
            @@ -11901,6 +11901,9 @@ acl_check_proxy_grant_access(THD *thd, const char *host, const char *user,
            		 
                 DBUG_RETURN(1);
            		 
               }
            		 
             
            +  if (opt_bootstrap)
            		 
            +    DBUG_RETURN(FALSE);
            		 
            +

            danblack Daniel Black added a comment - So a sql/sql_parse.cc:bootstrap faking sufficient authentication or diff --git a/sql/sql_acl.cc b/sql/sql_acl.cc index 949e9825dde..f62bcc8f84e 100644 --- a/sql/sql_acl.cc +++ b/sql/sql_acl.cc @@ -11901,6 +11901,9 @@ acl_check_proxy_grant_access(THD *thd, const char *host, const char *user, DBUG_RETURN(1); } + if (opt_bootstrap) + DBUG_RETURN(FALSE); +
            serg Sergei Golubchik made changes -
            Assignee Daniel Black [ danblack ]
            vlad.radu Vlad Radu made changes -
            Labels foundation

            People

              danblack Daniel Black
              danblack Daniel Black
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.