mirror of
https://github.com/MariaDB/server.git
synced 2025-08-09 22:24:09 +03:00
125e172a2b
Allow passwordless login in addition to usual login with password, when creating 'root' user during install. The effect of that change is that "local administrators" group are allowed to connect as root user. This is done via gssapi authentication plugin. Clients that are not aware of gssapi client plugin, can still login with password credentials.
23 lines
843 B
Plaintext
23 lines
843 B
Plaintext
CREATE USER 'GSSAPI_SHORTNAME' IDENTIFIED WITH gssapi;
|
|
connect con1,localhost,$GSSAPI_SHORTNAME,,;
|
|
SELECT USER(),CURRENT_USER();
|
|
USER() CURRENT_USER()
|
|
GSSAPI_SHORTNAME@localhost GSSAPI_SHORTNAME@%
|
|
disconnect con1;
|
|
connection default;
|
|
DROP USER 'GSSAPI_SHORTNAME';
|
|
CREATE USER nosuchuser IDENTIFIED WITH gssapi;
|
|
ERROR 28000: GSSAPI name mismatch, requested 'nosuchuser', actual name 'GSSAPI_SHORTNAME'
|
|
DROP USER nosuchuser;
|
|
CREATE USER usr1 IDENTIFIED WITH gssapi as 'GSSAPI_FULLNAME';
|
|
connect con1,localhost,usr1,,;
|
|
SELECT USER(),CURRENT_USER();
|
|
USER() CURRENT_USER()
|
|
usr1@localhost usr1@%
|
|
disconnect con1;
|
|
connection default;
|
|
DROP USER usr1;
|
|
CREATE USER nosuchuser IDENTIFIED WITH gssapi AS 'nosuchuser@EXAMPLE.COM';
|
|
ERROR 28000: GSSAPI name mismatch, requested 'nosuchuser@EXAMPLE.COM', actual name 'GSSAPI_FULLNAME'
|
|
DROP USER nosuchuser;
|