raghav-reglobe opened a new issue, #70340:
URL: https://github.com/apache/doris/issues/70340

   ### Search before asking
   
   - [x] I had searched in the 
[issues](https://github.com/apache/doris/issues?q=is%3Aissue) and found no 
similar issues.
   
   ### Version
   
   master (d9d60bee9fe), since #67792 (durable ACCOUNT_LOCK / ACCOUNT_UNLOCK).
   
   ### What's Wrong?
   
   Every `password_policy.*` column of `mysql.user` reads empty for every user.
   
   `Auth` fills those columns from `getPasswdPolicyInfo(userIdent)` only `if 
(passWordPolicyInfo.size() == 8)` (Auth.java, the `mysql.user` row builder, 
`userInfo.set(24 + i, …)`). #67792 added a ninth policy row, 
`password_policy.account_locked` (`PasswordPolicy.FailedLoginPolicy.getInfo`), 
so the list now has 9 rows, the check never holds, and the eight existing 
columns are left empty — including `password_policy.expiration_seconds`, 
`num_failed_login`, `failed_login_counter` and `lock_time`.
   
   ### What You Expected?
   
   The eight existing columns carry the policy values as before #67792 (and, 
optionally, the administrative lock gets a column of its own; today `SHOW 
CREATE USER` is the only place it can be read, as a trailing `ACCOUNT_LOCK`).
   
   ### How to Reproduce?
   
   ```sql
   CREATE USER u1 IDENTIFIED BY 'p1' FAILED_LOGIN_ATTEMPTS 3 PASSWORD_LOCK_TIME 
1 DAY;
   SELECT * FROM mysql.user WHERE User = 'u1'\G
   ```
   `password_policy.num_failed_login` and 
`password_policy.password_lock_seconds` are empty instead of `3` / `86400`.
   
   ### Anything Else?
   
   Keying the copy on the row names instead of the row count would keep it from 
breaking the next time a policy row is added.
   
   ### Are you willing to submit PR?
   
   - [x] Yes I am willing to submit a PR!
   
   ### Code of Conduct
   
   - [x] I agree to follow this project's [Code of 
Conduct](https://www.apache.org/foundation/policies/conduct)
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

  • [I] [Bug] mysql.user password_po... raghav-reglobe (via GitHub) via commits

Reply via email to