What's is difference between changing MySQL user password with and without -h option

skimeer · 09-03-2015, 08:58 AM

I have observed that for normal (other than root) user changing password with and without -h option has different effect. If password is changed without -h, then the commands used with -h did not pick new password. They still uses old password.

Also I am not able to connect to MySQL instance using -h option with root user. I am using MySQL Ver 14.14 Distrib 5.6.21, for Linux (x86_64) using EditLine wrapper

I am trying below command,

Quote:

[test@test ~]$ mysql -uroot -ptest -h 192.168.209.117
Warning: Using a password on the command line interface can be insecure.
ERROR 1045 (28000): Access denied for user 'root'@'test' (using password: YES)

Output of "SHOW GRANTS"

Quote:

mysql> show grants;
+----------------------------------------------------------------------------------------------------------------------------------------+
| Grants for root@localhost |
+----------------------------------------------------------------------------------------------------------------------------------------+
| GRANT ALL PRIVILEGES ON *.* TO 'root'@'localhost' IDENTIFIED BY PASSWORD '' WITH GRANT OPTION |
| GRANT PROXY ON ''@'' TO 'root'@'localhost' WITH GRANT OPTION |
+----------------------------------------------------------------------------------------------------------------------------------------+
2 rows in set (0.00 sec)

mysql>

hortageno · 09-03-2015, 09:21 AM

Quote:

Originally Posted by skimeer

I have observed that for normal (other than root) user changing password with and without -h option has different effect. If password is changed without -h, then the commands used with -h did not pick new password. They still uses old password.

Also I am not able to connect to MySQL instance using -h option with root user. I am using MySQL Ver 14.14 Distrib 5.6.21, for Linux (x86_64) using EditLine wrapper

I am trying below command,

Output of "SHOW GRANTS"

Default host for -h is "localhost". You can have different permissions/passwords depending where you connect from/to.

skimeer · 09-03-2015, 09:25 AM

1.How to enable root user to connect through "-h 192.168.209.117" option.
2.Do I need to reset user password with and without -h option through mysqladmin command.

hortageno · 09-03-2015, 09:40 AM

Quote:

Originally Posted by skimeer

1.How to enable root user to connect through "-h 192.168.209.117" option.
2.Do I need to reset user password with and without -h option through mysqladmin command.

I usually do such things with phpmyadmin, but you basically login with the account which works and change the password for user root@192.168.209.117 like this

Code:

SET PASSWORD FOR 'root'@'192.168.209.117' = PASSWORD('cleartext password');

https://dev.mysql.com/doc/refman/5.0...-password.html

Habitual · 09-03-2015, 10:40 AM

Quote:

Originally Posted by skimeer

1.How to enable root user to connect through "-h 192.168.209.117" option.

Code:

GRANT ALL PRIVILEGES ON *.* TO 'root'@'192.168.209.117' IDENTIFIED BY PASSWORD '<password>' WITH GRANT OPTION ; flush privileges; exit;

skimeer · 09-03-2015, 01:19 PM

Thanks for suggestions. I will try them out and update.
However my doubt is, does root user not allowed to login through Ip address from command line?

hortageno · 09-03-2015, 01:27 PM

You didn't understand completely. You login without the -h option to change the user's permissions and password for the login with the IP.

skimeer · 09-03-2015, 01:35 PM

Sorry but I am not getting you. I am trying to reset password in shell script through 'mysqladmin' command. If I use -h in mysqladmin, new password is effective only for 'mysql' commands used with -h.
I am connecting to mysql from that server itself.

astrogeek · 09-03-2015, 01:41 PM

Quote:

Originally Posted by skimeer

Thanks for suggestions. I will try them out and update.
However my doubt is, does root user not allowed to login through Ip address from command line?

Your MySQL users can login only accourdng to the GRANTs given them.

GRANTs for same name but different hosts (IP) are different users as far as MySQL is concerned. Changing password for one has no effect on any other.

And root@anywhere is just another MySQL user and carries no inherent privileges or restrictions - only what is in the GRANT table. Do not confuse a MySQL user named root with system root user - they are not related in any way.

Habitual · 09-03-2015, 01:44 PM

Users cannot change their mysql passwords.

skimeer · 09-04-2015, 07:26 AM

Tried executing

Quote:

GRANT ALL PRIVILEGES ON *.* TO 'root'@'' IDENTIFIED BY 'XXXX' WITH GRANT OPTION;

Query is successful but there is no grants are not updated. Also access issue not fixed.

Quote:

mysql> GRANT ALL PRIVILEGES ON *.* TO 'root'@'%' IDENTIFIED BY 'XXXX' WITH GRANT OPTION; Query OK, 0 rows affected (0.00 sec) mysql>

hortageno · 09-04-2015, 08:14 AM

Quote:

Originally Posted by skimeer

Tried executing

Query is successful but there is no grants are not updated. Also access issue not fixed.

The command(s) you used is not the same as in post 5. PASSWORD means literally PASSWORD whereas <password> means the password. Please try again exactly like written in post 5.

skimeer · 09-04-2015, 08:29 AM

That query not working.

Quote:

mysql> GRANT ALL PRIVILEGES ON *.* TO 'root'@'192.168.209.117' IDENTIFIED BY PASSWORD 'XXXX' WITH GRANT OPTION ; flush privileges; exit;
ERROR 1827 (HY000): The password hash doesn't have the expected format. Check if the correct password algorithm is being used with the PASSWORD() function.
Query OK, 0 rows affected (0.00 sec)

Bye