[TriLUG] shooting one's self in the foot with MySQL
David Rasch
rasch at raschnet.com
Thu Oct 14 10:50:01 EDT 2004
On Thu, Oct 14, 2004 at 10:47:11AM -0400, Dan Monjar <dan at daijin.dissimulo.com> wrote:
> --On Thursday, October 14, 2004 10:37:32 AM -0400 Dan Monjar
> <dan at daijin.dissimulo.com> wrote:
>
> >--On Thursday, October 14, 2004 10:28:51 AM -0400 "Thomas G. Mayfield"
> ><hulett819 at mailcan.com> wrote:
> >
> >>You can use 'mysql --user=root --password=<FOO>', or if you've totally
> >>eaten the password field (accomplished that myself about 2 weeks ago),
> >>you can open up mysql in "safe" mode and go fix your problems from there.
> >
> >thanks for the links!
>
>
> bingo...
>
> "If you change a password by using SET PASSWORD, INSERT, or UPDATE, you
> must encrypt the password using the PASSWORD() function. If you do not use
> PASSWORD() for these statements, the password will not work. For example,
> the following statement sets a password, but fails to encrypt it, so the
> user will not be able to connect afterward:"
>
> guess what I didn't do.
Don't forget to run "FLUSH PRIVILEGES" after doing these changes, else
they won't take effect.
David
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
URL: <http://www.trilug.org/pipermail/trilug/attachments/20041014/55aeb5b9/attachment.pgp>
More information about the TriLUG
mailing list