Password security was improved in version 4.1 by widening the password field (from 16 bytes to over 40). This is documented in the manual <http://www.mysql.com/doc/en/Password_hashing.html>. Clients compiled to work with versions of mysql prior to 4.1 give the behavior you describe when attemting to connect to mysql servers from 4.1 on. The manual describes some workarounds.

Michael

jamie murray wrote:
I have to disagree based on whats happening but I hope you can prove me
wrong.
(maybe I'm making some simple mistake and you can correct me very quickly
please look below)

For example
 if I do   ->   "grant all privileges on *.* to [EMAIL PROTECTED]
identified by 'somenewpassword";
                     I can access mysql from command line but nothing
else(php,perl,odbc,python etc...)

here is my odbc errer:" [mysql][ODBC 3.51 driver] client does not support
authentication protocol requested by server;
                                  consider upgrading mysql client;"

the thing is this is all being done on the server(there is no workstation
accessing the database i run all programs server side)
 and the only install is 5.0.
Also if this is a client problem why does it work when i create users with
no passwords as shown below.


if I do -> grant all privileges on *.* to [EMAIL PROTECTED] ; I can access mysql from command line and these ->(php,perl,odbc,python etc...)


----- Original Message ----- From: "Gerald R. Jensen" <[EMAIL PROTECTED]>
To: "jamie murray" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>;
<[EMAIL PROTECTED]>
Sent: Sunday, January 04, 2004 2:05 PM
Subject: Re: mysql 5.0




Jamie:

I don't think your problem has anything to do with version 5.0 ... though
there have been some enhancements in security and user privs, the
fundamentals (IMHO) have not changed.

The problem is most likely with the application itself ... it needs to

pass


the user ID and password, and the user ID needs to have been granted the
correct privs.

G. R. Jensen

----- Original Message ----- From: "jamie murray" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Sunday, January 04, 2004 9:22 AM
Subject: mysql 5.0



Hi guys, I posted a similar question on this the other day but received no answers. I'm running 5.0 and have a possible security/password problem. If i run from command line all users work with or without passwords. If I try and connect to mysql through php,perl,python or odbc with a user that has a password I get "client authentication protocol error". If I connect with any of the above with a user who has no password everything works fine. Does this have to do with 5.0 change to the password hash. If you have advice to offer it would be greatly appreciated.

Thanks!







--
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe:    http://lists.mysql.com/[EMAIL PROTECTED]



Reply via email to