Comment 4 for bug 1289599

Revision history for this message
Vincent Kéravec (vincent-keravec) wrote : Re: Authentication bypass

Here is a version of auth_socket.c that set info->authenticated_as and mitigate this bug.

After changing auth_socket.so:

[vike@localhost auth]$ mysql
ERROR 1698 (28000): Access denied for user 'vike'@'localhost'
[vike@localhost auth]$ sudo mysql
Welcome to the MySQL monitor. Commands end with ; or \g.
Your MySQL connection id is 4
Server version: 5.6.15-56 Percona Server (GPL), Release rel63.0, Revision 519

Copyright (c) 2009-2013 Percona LLC and/or its affiliates
Copyright (c) 2000, 2013, Oracle and/or its affiliates. All rights reserved.

Oracle is a registered trademark of Oracle Corporation and/or its
affiliates. Other names may be trademarks of their respective
owners.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

mysql> quit
Bye