[TriLUG] shooting one's self in the foot with MySQL

David Rasch rasch at raschnet.com
Thu Oct 14 10:50:01 EDT 2004


On Thu, Oct 14, 2004 at 10:47:11AM -0400, Dan Monjar <dan at daijin.dissimulo.com> wrote:
> --On Thursday, October 14, 2004 10:37:32 AM -0400 Dan Monjar 
> <dan at daijin.dissimulo.com> wrote:
> 
> >--On Thursday, October 14, 2004 10:28:51 AM -0400 "Thomas G. Mayfield"
> ><hulett819 at mailcan.com> wrote:
> >
> >>You can use 'mysql --user=root --password=<FOO>', or if you've totally
> >>eaten the password field (accomplished that myself about 2 weeks ago),
> >>you can open up mysql in "safe" mode and go fix your problems from there.
> >
> >thanks for the links!
> 
> 
> bingo...
> 
> "If you change a password by using SET PASSWORD, INSERT, or UPDATE, you 
> must encrypt the password using the PASSWORD() function. If you do not use 
> PASSWORD() for these statements, the password will not work. For example, 
> the following statement sets a password, but fails to encrypt it, so the 
> user will not be able to connect afterward:"
> 
> guess what I didn't do.

Don't forget to run "FLUSH PRIVILEGES" after doing these changes, else
they won't take effect.

David
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
URL: <http://www.trilug.org/pipermail/trilug/attachments/20041014/55aeb5b9/attachment.pgp>


More information about the TriLUG mailing list