control: severity -1 normal

On Mon, 29 Aug 2016 20:41:53 +0200 Paul Gevers <elb...@debian.org> wrote:
> To prevent migration of the current package before I understand why
> and determine it to be ok or not, I file this bug.

So the issue is not severe. What happens is that MariaDB and MySQL
apparently treat localhost and 127.0.0.1 very similar as connecting host
during authentication, but the password for users may be different for
those two hosts. In the regression tests we were reusing the username,
but (in hind sight correctly) assigning different passwords. The
password to log into the database was apparently picked from the first
user that was added.

After initializing the 127.0.0.1 test these are the grants, where the
passwords are different.
mysql> show grants for 'db-test-mysql'@localhost;
+-----------------------------------------------------------------------------------+
| Grants for db-test-mysql@localhost
           |
+-----------------------------------------------------------------------------------+
| GRANT USAGE ON *.* TO 'db-test-mysql'@'localhost' IDENTIFIED BY
PASSWORD <secret> |
+-----------------------------------------------------------------------------------+
1 row in set (0.00 sec)

mysql> show grants for 'db-test-mysql'@127.0.0.1;
+-----------------------------------------------------------------------------------+
| Grants for db-test-mysql@127.0.0.1
           |
+-----------------------------------------------------------------------------------+
| GRANT USAGE ON *.* TO 'db-test-mysql'@'127.0.0.1' IDENTIFIED BY
PASSWORD <secret> |
| GRANT ALL PRIVILEGES ON `dbtestmysql`.* TO 'db-test-mysql'@'127.0.0.1'
           |
+-----------------------------------------------------------------------------------+
2 rows in set (0.00 sec)

When I try to log in with:
$mysql -u db-test-mysql -h 127.0.0.1 -p
I need to use the password of the localhost user instead of the
127.0.0.1 user. When I remove the localhost user grant, everything works
as expected.

Not sure if this is a bug or a feature of MySQL/MariaDB.

Paul

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to