Hi all,
We have custom logic in place that “suspends” a MySQL user by:
- reversing the password hash
- replacing the leading “*” with “-”
In other words (pseudo-code):
my $hash = SELECT password FROM mysql.user WHERE user = 'theuser';
$hash = $hash.replace(/^\*/,"").reverse();
UPDATE mysql.user SET password = "-$hash" WHERE user = 'theuser';
I have noticed that MySQL’s SHOW GRANTS reports these “suspended”
password hashes with the leading dash “fixed” to a leading asterisk.
MariaDB 10, though, has SHOW GRANTS report the literal contents of
mysql.user.
Is this behavior by design in MariaDB 10? Is it behavior that we can
depend on moving forward?
-FG
_______________________________________________
Mailing list: https://launchpad.net/~maria-discuss
Post to : maria-discuss@lists.launchpad.net
Unsubscribe : https://launchpad.net/~maria-discuss
More help : https://help.launchpad.net/ListHelp
