1--source include/not_embedded.inc
2--source include/have_ssl.inc
3
4connect (ssl_con,localhost,root,,,,,SSL);
5--replace_regex $ALLOWED_CIPHERS_REGEX
6SHOW STATUS LIKE 'Ssl_cipher';
7
8CREATE USER 'kristofer' IDENTIFIED WITH 'sha256_password';
9SET GLOBAL old_passwords= 2;
10SET SESSION old_passwords= 2;
11ALTER USER 'kristofer' IDENTIFIED BY 'secret';
12connect(con1,localhost,kristofer,secret,,,,SSL);
13connection con1;
14connection ssl_con;
15disconnect con1;
16DROP USER 'kristofer';
17GRANT ALL ON *.* TO 'kristofer'@'localhost' IDENTIFIED WITH 'sha256_password' BY '123';
18ALTER USER 'kristofer'@'localhost' IDENTIFIED BY 'secret2';
19connect(con2,localhost,kristofer,secret2,,,,SSL);
20connection con2;
21SELECT USER(),CURRENT_USER();
22SHOW GRANTS FOR 'kristofer'@'localhost';
23connection ssl_con;
24disconnect con2;
25DROP USER 'kristofer'@'localhost';
26GRANT ALL ON *.* TO 'kristofer'@'localhost' IDENTIFIED WITH 'sha256_password' BY '123';
27ALTER USER 'kristofer'@'localhost' IDENTIFIED BY '';
28connect(con3,localhost,kristofer,,,,,SSL);
29connection con3;
30SELECT USER(),CURRENT_USER();
31SHOW GRANTS FOR 'kristofer'@'localhost';
32connection ssl_con;
33disconnect con3;
34DROP USER 'kristofer'@'localhost';
35
36GRANT ALL ON *.* TO 'kristofer'@'33.33.33.33' IDENTIFIED WITH 'sha256_password' BY '123';
37ALTER USER 'kristofer'@'33.33.33.33' IDENTIFIED BY '';
38--echo Connection should fail for localhost
39--replace_result $MASTER_MYSOCK MASTER_MYSOCK
40--disable_query_log
41--error ER_ACCESS_DENIED_ERROR
42connect(con4,127.0.0.1,kristofer,,,,,SSL);
43--enable_query_log
44DROP USER 'kristofer'@'33.33.33.33';
45
46--echo #
47--echo # BUG#14807074 ALTER USER PASSWORD EXPIRE VS SHA256_PASSWORD
48--echo #
49CREATE USER 'u1'@'localhost' IDENTIFIED WITH 'sha256_password';
50ALTER USER 'u1'@'localhost' IDENTIFIED BY 'pass';
51ALTER USER 'u1'@'localhost' PASSWORD EXPIRE;
52connect(con5,127.0.0.1,u1,pass,test,,,SSL);
53--error ER_MUST_CHANGE_PASSWORD
54SELECT USER();
55ALTER USER 'u1'@'localhost' IDENTIFIED BY 'pass2';
56
57connect(con6,127.0.0.1,u1,pass2,test,,,SSL);
58SELECT USER();
59
60connection default;
61DROP USER 'u1'@'localhost';
62disconnect con5;
63disconnect con6;
64
65# Restore default value to old_passwords
66SET GLOBAL old_passwords= default;
67connection default;
68disconnect ssl_con;
69
70
71