[MDEV-10055] Hash replication password in master.info Created: 2016-05-11 Updated: 2016-05-11 Resolved: 2016-05-11 |
|
| Status: | Closed |
| Project: | MariaDB Server |
| Component/s: | Authentication and Privilege System, Replication |
| Fix Version/s: | N/A |
| Type: | Task | Priority: | Major |
| Reporter: | Will Fong | Assignee: | Sergei Golubchik |
| Resolution: | Won't Fix | Votes: | 0 |
| Labels: | None | ||
| Issue Links: |
|
||||||||
| Description |
|
Passwords should be hashed before being written to disk. Encryption is probably a much better way to handle this (related to Thanks! |
| Comments |
| Comment by Sergei Golubchik [ 2016-05-11 ] |
|
No, we can not. The password hash in the mysql.user is used to verify whether a connecting client is who he claims he is. The password in the master.info is used to connect as a client to another MariaDB server. The authentication protocol is designed so that client must have the original password, while the server only needs the hash (to prevent anyone who can list the content of mysql.user table from impersonating other users). |