Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

mysql_native_password authentication plugin - RHEL #1718

Open
kbilev opened this issue Sep 6, 2024 · 0 comments
Open

mysql_native_password authentication plugin - RHEL #1718

kbilev opened this issue Sep 6, 2024 · 0 comments

Comments

@kbilev
Copy link
Contributor

kbilev commented Sep 6, 2024

Describe the bug
In RHEL, mysql users are created with the mysql_native_password authentication plugin enabled (due to /etc/my.cnf.d/mysql-default-authentication-plugin.cnf)
Starting from mysql version 8.4, the plugin will be disabled (https://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-0.html)
This will probably break openITCOCKPIT installations under RHEL when the user mode is not changed to caching_sha2_password

To Reproduce
Steps to check the users:

mysql --defaults-file=/etc/mysql/debian.cnf
select user, host, plugin from mysql.user;

Expected behavior
Add a check to raise a warning when the mysql_native_password authentication plugin is used.
Maybe change automatically the users to use caching_sha2_password

ALTER USER 'root'@'localhost' IDENTIFIED WITH caching_sha2_password BY 'password';
ALTER USER 'openitcockpit'@'localhost' IDENTIFIED WITH caching_sha2_password BY 'password';

Versions

  • openITCOCKPIT Server Version: 4.8.x
  • RHEL
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant