Adding database user ok but password not.

Discussion in 'General' started by lnxgs, Jul 11, 2024.

  1. lnxgs

    lnxgs Member

    hello,
    I use the last version of Ispconfig and Debian 12 with Oracle Community MySQL:
    mysql Ver 8.4.1 for Linux on x86_64 (MySQL Community Server - GPL)


    Ispconfig fails to add a password to database user. whe I did on the Ispconfig Web UI.
    It adds the user but not the password. This is the password plugin set on mysql (the default one):

    mysql> select user,host,plugin from mysql.user where user='databaseuser';
    +--------------+-----------+-----------------------+
    | user | host | plugin |
    +--------------+-----------+-----------------------+
    | databaseuser | localhost | caching_sha2_password |
    +--------------+-----------+-----------------------+
    1 row in set (0.00 sec)

    To fix I had to add the password manually on the mysql database:

    mysql> ALTER USER 'databaseuser'@'localhost' IDENTIFIED WITH caching_sha2_password BY 'MycomplexPassword';
    Query OK, 0 rows affected (0.02 sec)

    mysql> FLUSH PRIVILEGES;
    Query OK, 0 rows affected (0.00 sec)

    Doing so, it ok.

    suggestion?
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    ISPConfig does not support caching_sha2_password mechanism and there is also no easy way to add that as it would require that ISPConfig stores passwords as cleartext and not hashed as we do it now, so it would be a huge backstep security wise if we would have to do that. You must switch your database to use the normal password() encryption mechanism. In general, we recommend using MariaDB and w eonly support the versions that ship with the supported OS. We do not test against MySQL, so it might or might not work when you install MySQL instead or MariaDB.

    Btw. There is a issue report for this already:

    https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/6702
     
    ahrasis likes this.

Share This Page