Skip to:
New, fresh deployment uses mysql_native_password:
$ perl pt-show-grants h=10.111.49.160 | grep -i native ALTER USER `clustercheck`@`localhost` IDENTIFIED WITH 'mysql_native_password' AS '*DF6F4A1CE4A2D5E8DBA0BD805564A215F508D892' REQUIRE NONE PASSWORD EXPIRE DEFAULT ACCOUNT UNLOCK PASSWORD HISTORY DEFAULT PASSWORD REUSE INTERVAL DEFAULT PASSWORD REQUIRE CURRENT DEFAULT; ALTER USER `monitor`@`%` IDENTIFIED WITH 'mysql_native_password' AS '*7152A91E652DE13B7464C4D60A0EDB65EDF4FA60' REQUIRE SSL WITH MAX_USER_CONNECTIONS 100 PASSWORD EXPIRE DEFAULT ACCOUNT UNLOCK PASSWORD HISTORY DEFAULT PASSWORD REUSE INTERVAL DEFAULT PASSWORD REQUIRE CURRENT DEFAULT; ALTER USER `operator`@`%` IDENTIFIED WITH 'mysql_native_password' AS '*FD880B7A98AE0927863FF25FC38273C7CE3F3B1A' REQUIRE SSL PASSWORD EXPIRE DEFAULT ACCOUNT UNLOCK PASSWORD HISTORY DEFAULT PASSWORD REUSE INTERVAL DEFAULT PASSWORD REQUIRE CURRENT DEFAULT; ALTER USER `replication`@`%` IDENTIFIED WITH 'mysql_native_password' AS '*094607912168BA3BDA606FF73F58FD476C958C96' REQUIRE NONE PASSWORD EXPIRE DEFAULT ACCOUNT UNLOCK PASSWORD HISTORY DEFAULT PASSWORD REUSE INTERVAL DEFAULT PASSWORD REQUIRE CURRENT DEFAULT; ALTER USER `root`@`%` IDENTIFIED WITH 'mysql_native_password' AS '*63CC0C229A48BD89D2281FD8FB42D55BA9C621C4' REQUIRE SSL PASSWORD EXPIRE DEFAULT ACCOUNT UNLOCK PASSWORD HISTORY DEFAULT PASSWORD REUSE INTERVAL DEFAULT PASSWORD REQUIRE CURRENT DEFAULT; ALTER USER `root`@`localhost` IDENTIFIED WITH 'mysql_native_password' AS '*63CC0C229A48BD89D2281FD8FB42D55BA9C621C4' REQUIRE NONE PASSWORD EXPIRE DEFAULT ACCOUNT UNLOCK PASSWORD HISTORY DEFAULT PASSWORD REUSE INTERVAL DEFAULT PASSWORD REQUIRE CURRENT DEFAULT; ALTER USER `xtrabackup`@`%` IDENTIFIED WITH 'mysql_native_password' AS '*5A7E9B2FA6542B637FD97131A3784DBC4A1C893E' REQUIRE NONE PASSWORD EXPIRE DEFAULT ACCOUNT UNLOCK PASSWORD HISTORY DEFAULT PASSWORD REUSE INTERVAL DEFAULT PASSWORD REQUIRE CURRENT DEFAULT;
and it also is enforced in the configuration:
default_authentication_plugin=mysql_native_password
Also:
{"log":"2023-01-04T13:34:38.034338Z 0 [Warning] [MY-010918] [Server] 'default_authentication_plugin' is deprecated and will be removed in a future release. Please use authentication_policy instead.\n","file":"/var/lib/mysql/mysqld-error.log"}
Related to: https://jira.percona.com/browse/K8SPXC-1179
@dmitriy.kostiuk We need to document that switching from haproxy to proxysql is impossible.
New, fresh deployment uses mysql_native_password:
$ perl pt-show-grants h=10.111.49.160 | grep -i native ALTER USER `clustercheck`@`localhost` IDENTIFIED WITH 'mysql_native_password' AS '*DF6F4A1CE4A2D5E8DBA0BD805564A215F508D892' REQUIRE NONE PASSWORD EXPIRE DEFAULT ACCOUNT UNLOCK PASSWORD HISTORY DEFAULT PASSWORD REUSE INTERVAL DEFAULT PASSWORD REQUIRE CURRENT DEFAULT; ALTER USER `monitor`@`%` IDENTIFIED WITH 'mysql_native_password' AS '*7152A91E652DE13B7464C4D60A0EDB65EDF4FA60' REQUIRE SSL WITH MAX_USER_CONNECTIONS 100 PASSWORD EXPIRE DEFAULT ACCOUNT UNLOCK PASSWORD HISTORY DEFAULT PASSWORD REUSE INTERVAL DEFAULT PASSWORD REQUIRE CURRENT DEFAULT; ALTER USER `operator`@`%` IDENTIFIED WITH 'mysql_native_password' AS '*FD880B7A98AE0927863FF25FC38273C7CE3F3B1A' REQUIRE SSL PASSWORD EXPIRE DEFAULT ACCOUNT UNLOCK PASSWORD HISTORY DEFAULT PASSWORD REUSE INTERVAL DEFAULT PASSWORD REQUIRE CURRENT DEFAULT; ALTER USER `replication`@`%` IDENTIFIED WITH 'mysql_native_password' AS '*094607912168BA3BDA606FF73F58FD476C958C96' REQUIRE NONE PASSWORD EXPIRE DEFAULT ACCOUNT UNLOCK PASSWORD HISTORY DEFAULT PASSWORD REUSE INTERVAL DEFAULT PASSWORD REQUIRE CURRENT DEFAULT; ALTER USER `root`@`%` IDENTIFIED WITH 'mysql_native_password' AS '*63CC0C229A48BD89D2281FD8FB42D55BA9C621C4' REQUIRE SSL PASSWORD EXPIRE DEFAULT ACCOUNT UNLOCK PASSWORD HISTORY DEFAULT PASSWORD REUSE INTERVAL DEFAULT PASSWORD REQUIRE CURRENT DEFAULT; ALTER USER `root`@`localhost` IDENTIFIED WITH 'mysql_native_password' AS '*63CC0C229A48BD89D2281FD8FB42D55BA9C621C4' REQUIRE NONE PASSWORD EXPIRE DEFAULT ACCOUNT UNLOCK PASSWORD HISTORY DEFAULT PASSWORD REUSE INTERVAL DEFAULT PASSWORD REQUIRE CURRENT DEFAULT; ALTER USER `xtrabackup`@`%` IDENTIFIED WITH 'mysql_native_password' AS '*5A7E9B2FA6542B637FD97131A3784DBC4A1C893E' REQUIRE NONE PASSWORD EXPIRE DEFAULT ACCOUNT UNLOCK PASSWORD HISTORY DEFAULT PASSWORD REUSE INTERVAL DEFAULT PASSWORD REQUIRE CURRENT DEFAULT;
and it also is enforced in the configuration:
default_authentication_plugin=mysql_native_password
Also:
{"log":"2023-01-04T13:34:38.034338Z 0 [Warning] [MY-010918] [Server] 'default_authentication_plugin' is deprecated and will be removed in a future release. Please use authentication_policy instead.\n","file":"/var/lib/mysql/mysqld-error.log"}
Related to: https://jira.percona.com/browse/K8SPXC-1179