Mysql(MariaDB 10.0.29):设置root密码，但仍然可以登录而无需询问密码? [英] Mysql (MariaDB 10.0.29): Set root password, but still can login without asking password?

问题描述

我想通过设置root密码来保护mysql. 我成功重置了root密码:

I want to secure mysql by setting root password. I reset root password successfully:

MariaDB [(none)]> select Host, User, Password from mysql.user;
+-----------+------+-------------------------------------------+
| Host      | User | Password                                  |
+-----------+------+-------------------------------------------+
| localhost | root | *58319282EAB9E38D49CA25844B73DA62C80C2ABC |
+-----------+------+-------------------------------------------+
1 row in set (0.00 sec)

但是，在具有刷新特权之后，重新启动Mysql，我仍然可以登录mysql(在本地主机上)而无需输入密码.

But, after flush privileges, restart Mysql, I can still login mysql (on local host) without typing password.

root@myhost:/# mysql
Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is 10
Server version: 10.0.29-MariaDB SLE 12 SP1 package

Copyright (c) 2000, 2016, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MariaDB [(none)]> 

如何在连接时强制mysql询问密码?谢谢！

How can I force mysql asking password when connect ? Thanks !

推荐答案

在MySQL表上，有一列名为plugin:

On MySQL table you have a column called plugin:

MariaDB [(none)]> SELECT host, user, password, plugin FROM mysql.user LIMIT 0,1;
+-----------+------+-------------------------------------------+--------+
| host      | user | password                                  | plugin |
+-----------+------+-------------------------------------------+--------+
| localhost | root | *                                         |        |
+-----------+------+-------------------------------------------+--------+
1 row in set (0.00 sec)

如果我没有记错的话，mariaDB安装的默认插件为'console'或'unix_socket'，并且该插件允许您从控制台输入密码而无需输入密码.但是也请禁用密码身份验证，您将无法从其他客户端连接.

If I remember correctly the default plugin for mariaDB installations are 'console' or 'unix_socket', and this plugin allows you to enter without password, from console. But also disable authentication with password, and you cannot connect from another clients.

只需使用空('')值更新插件字段，然后使用FLUSH PRIVILEGES;

Simply update the plugin field with empty ('') value, and then, use FLUSH PRIVILEGES;

SET PASSWORD FOR 'root'@'localhost' = PASSWORD('MyNewPass');
UPDATE mysql.user SET plugin = '' WHERE user = 'root' AND host = 'localhost';
FLUSH PRIVILEGES;

有了这个，您的问题就解决了.

With this, you have the problem solved.

这篇关于Mysql(MariaDB 10.0.29):设置root密码，但仍然可以登录而无需询问密码?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！