Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-8226

Simple password check does not allow empty passwords even when all options are set to 0

    Details

    • Type: Bug
    • Status: Open
    • Priority: Minor
    • Resolution: Unresolved
    • Affects Version/s: 10.1
    • Fix Version/s: 10.1
    • Component/s: Plugins
    • Labels:
      None

      Description

      install soname 'simple_password_check';
      
      set global
        simple_password_check_digits = 0,
        simple_password_check_letters_same_case = 0,
        simple_password_check_other_characters = 0;
      
      set global
        simple_password_check_minimal_length = 0;
      
      show variables like 'simple_password%';
      
      set password = password('');
      
      Variable_name	Value
      simple_password_check_digits	0
      simple_password_check_letters_same_case	0
      simple_password_check_minimal_length	0
      simple_password_check_other_characters	0
      set password = password('');
      ...
      mysqltest: At line 13: query 'set password = password('')' failed: 1819: Your password does not satisfy the current policy requirements
      

      It might make sense, but then it should not be allowed to set simple_password_check_minimal_length to 0, it should be adjusted to 1 with a warning.

        Gliffy Diagrams

          Attachments

            Activity

            There are no comments yet on this issue.

              People

              • Assignee:
                serg Sergei Golubchik
                Reporter:
                elenst Elena Stepanova
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated: