MariaDB 没有在 Ubuntu 15.04 上检查密码

Posted 2023-02-24

【中文标题】MariaDB 没有在 Ubuntu 15.04 上检查密码

【英文标题】：MariaDB is not checking password on Ubuntu 15.04

【发布时间】：2015-08-04 17:47:31

【问题描述】：

我在我的服务器上安装了 Ubuntu Server 15.04 和 MariaDB 10.0.17。

安装MariaDB时看不到密码设置页面，安装完成。

所以我尝试使用 SET PASSWORD 和 UPDATE 表更改我的 root 密码。

但是，没有发生。

我可以使用任何密码访问 mysql，无需密码。 像这样：

root@kuroneko-Server:~# mysql -uroot -p
Enter password: [Type 'itsnotpassword']
Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is 34
Server version: 10.0.17-MariaDB-0ubuntu1 (Ubuntu)

Copyright (c) 2000, 2015, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MariaDB [(none)]>

我已经尝试了刷新权限；和服务 mysql 重新启动。 重装ubuntu，重装mariadb...等

服务mysql状态：

root@kuroneko-Server:~# service mysql status
● mysql.service - LSB: Start and stop the mysql database server daemon
   Loaded: loaded (/etc/init.d/mysql)
   Active: active (running) since 금 2015-05-22 11:17:41 EDT; 34min ago
     Docs: man:systemd-sysv-generator(8)
  Process: 8127 ExecStop=/etc/init.d/mysql stop (code=exited, status=0/SUCCESS)
  Process: 8158 ExecStart=/etc/init.d/mysql start (code=exited, status=0/SUCCESS)
   CGroup: /system.slice/mysql.service
           ├─8183 /bin/bash /usr/bin/mysqld_safe
           ├─8184 logger -p daemon.err -t /etc/init.d/mysql -i
           └─8338 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib/mysql/plugin --user=mysql --log-error=/var/log/mysql/error.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/run/mysqld/mysqld.sock --port=3306

 5월 22 11:17:40 kuroneko-Server systemd[1]: Starting LSB: Start and stop the mysql database server daemon...
 5월 22 11:17:40 kuroneko-Server mysql[8158]: * Starting MariaDB database server mysqld
 5월 22 11:17:41 kuroneko-Server mysql[8158]: ...done.
 5월 22 11:17:41 kuroneko-Server systemd[1]: Started LSB: Start and stop the mysql database server daemon.

MariaDB 设置。

[mysqld]
#
# * Basic Settings
#
user            = mysql
pid-file        = /var/run/mysqld/mysqld.pid
socket          = /var/run/mysqld/mysqld.sock
port            = 3306
basedir         = /usr
datadir         = /var/lib/mysql
tmpdir          = /tmp
lc-messages-dir = /usr/share/mysql
skip-external-locking

# Instead of skip-networking the default is now to listen only on
# localhost which is more compatible and is not less secure.
bind-address            = 127.0.0.1

#
# * Fine Tuning
#
key_buffer              = 16M
max_allowed_packet      = 16M
thread_stack            = 192K
thread_cache_size       = 8
# This replaces the startup script and checks MyISAM tables if needed
# the first time they are touched
myisam-recover         = BACKUP
#max_connections        = 100
#table_cache            = 64
#thread_concurrency     = 10

#
# * Query Cache Configuration
#
query_cache_limit       = 1M
query_cache_size        = 16M

#
# * Logging and Replication
#
# Both location gets rotated by the cronjob.
# Be aware that this log type is a performance killer.
# As of 5.1 you can enable the log at runtime!
#general_log_file        = /var/log/mysql/mysql.log
#general_log             = 1
#
# Error log - should be very few entries.
#
log_error = /var/log/mysql/error.log
#
# Here you can see queries with especially long duration
#log_slow_queries       = /var/log/mysql/mysql-slow.log
#long_query_time = 2
#log-queries-not-using-indexes
#
# The following can be used as easy to replay backup logs or for replication.
# note: if you are setting up a replication slave, see README.Debian about
#       other settings you may need to change.
#server-id              = 1
#log_bin                        = /var/log/mysql/mysql-bin.log
expire_logs_days        = 10
max_binlog_size   = 100M
#binlog_do_db           = include_database_name
#binlog_ignore_db       = include_database_name

#
# * InnoDB
#
# InnoDB is enabled by default with a 10MB datafile in /var/lib/mysql/.
# Read the manual for more InnoDB related options. There are many!

#
# * Security Features
#
# Read the manual, too, if you want chroot!
# chroot = /var/lib/mysql/
#
# For generating SSL certificates I recommend the OpenSSL GUI "tinyca".
#
# ssl-ca=/etc/mysql/cacert.pem
# ssl-cert=/etc/mysql/server-cert.pem
# ssl-key=/etc/mysql/server-key.pem

#
# * Character sets
#
# Default is Latin1, if you need UTF-8 set all this (also in client section)
#
character-set-server  = utf8
collation-server      = utf8_general_ci
character_set_server   = utf8
collation_server       = utf8_general_ci

#
# * Unix socket authentication plugin
#
# Needed so the root database user can authenticate without a password but
# only when running as the unix root user.
#
# Also available for other users if required.
# See https://mariadb.com/kb/en/unix_socket-authentication-plugin/
plugin-load-add         = auth_socket.so

有人知道吗？

我找不到有关此问题的任何信息。

【问题讨论】：

通常使用mysqladmin 工具设置密码。你试过吗？

@tadman 是的。我第一次尝试。 :'(

【参考方案1】：

从 10.0.22-6 开始内置 Unix 套接字认证插件

需要这样 root 数据库用户可以在没有密码的情况下进行身份验证，但仅在以 unix root 用户身份运行时。

如果需要，也可供其他用户使用。 见https://mariadb.com/kb/en/unix_socket-authentication-plugin/

【参考方案2】：

见：http://ubuntuforums.org/showthread.php?t=2275033

并执行下面的sql：

USE mysql; 

UPDATE user 
SET password=PASSWORD('NEW_PASSWORD'), 
    plugin='' 
WHERE user='root';

FLUSH PRIVILEGES;

PS：出于安全考虑，设置了root用户的plugin字段，以防止非root用户登录。所以取消那个插件就可以了。

【参考方案3】：

答案就在你的配置文件中

#
# * Unix socket authentication plugin
#
# Needed so the root database user can authenticate without a password but
# only when running as the unix root user.
#
# Also available for other users if required.
# See https://mariadb.com/kb/en/unix_socket-authentication-plugin/
plugin-load-add         = auth_socket.so

auth_socket.so 允许当您是 root 时，无需密码提示即可登录。因此，理想情况下，您只需键入“mysql”即可登录

【参考方案4】：

MariaDB 10.0.17 无法使用非 root 用户访问 root。 （包括网络访问）

任何人都可以使用 ubuntu root 用户访问 MariaDB root。 （非认证）

所以让新的 root2 用户在 web 上管理 mysql。