[MDEV-22972] After upgrading server/client to 10.5 clients identified via non-builtin plugins cannot be authenticated Created: 2020-06-21  Updated: 2020-06-21  Resolved: 2020-06-21

Status: Closed
Project: MariaDB Server
Component/s: Authentication and Privilege System, Platform Debian, Plugins
Affects Version/s: 10.5
Fix Version/s: 10.5.4

Type: Bug Priority: Critical
Reporter: Elena Stepanova Assignee: Sergei Golubchik
Resolution: Fixed Votes: 0
Labels: None


 Description   

Upon upgrade from previous versions, e.g. 10.3 or 10.4, debian packages mariadb-client and mariadb-server pull corresponding versions of each other as a dependency, but neither of them requires upgrade of libmariadb3, so it remains as previously installed:

ii  libmariadb3:amd64                          1:10.4.14+maria~xenial                          amd64        MariaDB database client library
ii  mariadb-client                             1:10.5.4+maria~xenial                           all          MariaDB database client (metapackage depending on the latest version)
rc  mariadb-client-10.4                        1:10.4.14+maria~xenial                          amd64        MariaDB database client binaries
ii  mariadb-client-10.5                        1:10.5.4+maria~xenial                           amd64        MariaDB database client binaries
ii  mariadb-client-core-10.5                   1:10.5.4+maria~xenial                           amd64        MariaDB database core client binaries
ii  mariadb-common                             1:10.5.4+maria~xenial                           all          MariaDB common configuration files
ii  mariadb-server                             1:10.5.4+maria~xenial                           all          MariaDB database server (metapackage depending on the latest version)
rc  mariadb-server-10.4                        1:10.4.14+maria~xenial                          amd64        MariaDB database server binaries
ii  mariadb-server-10.5                        1:10.5.4+maria~xenial                           amd64        MariaDB database server binaries
ii  mariadb-server-core-10.5                   1:10.5.4+maria~xenial                           amd64        MariaDB database core server files
ii  mysql-common                               1:10.4.14+maria~xenial                          all          MariaDB database common files (e.g. /etc/mysql/my.cnf)

After that users which need client authentication plugins such as ed25519 and alike can no longer connect:

$ mysql -uu -p
Enter password: 
ERROR 1045 (28000): Plugin client_ed25519 could not be loaded: /usr/lib/x86_64-linux-gnu/libmariadb3/plugin/client_ed25519.so: cannot open shared object file: No such file or directory

Apparently the reason is this change in packaging between 10.4 and 10.5:

 
Diff for files debs-10.3/binary/libmariadb3_10.3.24+maria~xenial_amd64.deb debs-10.5/binary/libmariadb3_10.5.4+maria~xenial_amd64.deb:
 
-./usr/lib/mysql/
-./usr/lib/mysql/plugin/
-./usr/lib/mysql/plugin/client_ed25519.so
-./usr/lib/mysql/plugin/dialog.so
-./usr/lib/mysql/plugin/mysql_clear_password.so
-./usr/lib/mysql/plugin/sha256_password.so
+./usr/lib/x86_64-linux-gnu/libmariadb3/
+./usr/lib/x86_64-linux-gnu/libmariadb3/plugin/
+./usr/lib/x86_64-linux-gnu/libmariadb3/plugin/caching_sha2_password.so
+./usr/lib/x86_64-linux-gnu/libmariadb3/plugin/client_ed25519.so
+./usr/lib/x86_64-linux-gnu/libmariadb3/plugin/dialog.so
+./usr/lib/x86_64-linux-gnu/libmariadb3/plugin/mysql_clear_password.so
+./usr/lib/x86_64-linux-gnu/libmariadb3/plugin/sha256_password.so

The workaround is to upgrade libmariadb3 package explicitly.


Generated at Thu Feb 08 09:18:52 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.