[debian-mysql] Bug#1088133: Bug#1088133: mariadb-server: passwordless root doesn't survive restores

[Phil Dibowitz]

Well, I tried to sign up for Salsa, but got a bunch of errors with 
various providers saying "You have to be in this organization" (google) 
or "Signing in using your GitLab.com account without a pre-existing 
GitLab account is not allowed. Create a GitLab account first, and then 
connect it to your GitLab.com account." (for Gitlab, but I do, and I am 
logged in), then tried to sign up directly and got told my account is 
pending a gitlab approval.

So no luck on contributing directly.

Anyway I might add something like this to the `ROOT USER AUTHENTICATION 
VIA UNIX SOCKET` section:

```
If you need to do a restore of an existing mysql_dump which overwrites 
the user table, you can restore passwordless root with:

   GRANT ALL PRIVILEGES ON *.* TO 'root'@'localhost' IDENTIFIED VIA 
unix_socket WITH GRANT OPTION


And then drop the debian-sys-maint user with:

   DROP USER 'debian-sys-maint'@'localhost'
```



On 11/23/24 2:38 PM, Otto Kekäläinen wrote:
> Hi!
> 
>> First of all - the mariadb packages are really great, and the new
>> passwordless root setup is awesome, thanks for all your work.
> 
> Thanks! We debuted it in Debian 10 years ago, and since both upstream
> MariaDB and MySQL started using it everywhere.
> 
>> One small thing though - If you use `mysqldump` from a version prior
>> to passwordless root, and then restore that on a new installation,
>> you lose the passwordless root account, and restore the debian-sys-maint
>> and passworded-root accounts.
>>
>> While this is obvious and not really a bug, it seems like a common
>> situation that can cause lots of confusion (took me a while to figure
>> out what was going on) and it would be really great if the
>> README.Debian.gz could document how to properly restore the correct
>> settings (maybe even a simple script that could be run).
> 
> You are right, this corner case isn't automated nor have we good advice.
> 
> Suggestions welcome! It is not specific to Debian, so you can file
> Jira or send PR upstream, and if it is merged on latest upstream
> development version we can backport it in Debian for all users.
> 
> Alternatively you can submit a Debian-only README update at
> https://salsa.debian.org/mariadb-team/mariadb-server/


-- 
Phil Dibowitz                             phil at ipom.com
Open Source software and tech docs        Insanity Palace of Metallica
http://www.phildev.net/                   http://www.ipom.com/

"Be who you are and say what you feel, because those who mind don't
  matter and those who matter don't mind."
  - Dr. Seuss