diff options
author | Sergei Golubchik <serg@mariadb.org> | 2019-02-05 16:07:07 +0100 |
---|---|---|
committer | Sergei Golubchik <serg@mariadb.org> | 2019-02-12 19:14:37 +0100 |
commit | b9f3f06857ac6f9105dc65caae19782f09b47fb3 (patch) | |
tree | 0ead96a1d76672ad42ca3b11d29f2abb390b5773 /cmake/build_configurations | |
parent | f07b76fcfd68a0ae394764b181c1305b86e8f55d (diff) | |
download | mariadb-git-b9f3f06857ac6f9105dc65caae19782f09b47fb3.tar.gz |
MDEV-12484 Enable unix socket authentication by default
Change the default authentication for root@localhost to
IDENTIFIED VIA mysql_native_password USING 'invalid' OR unix_socket
which provides secure passwordless login, while still allowing
SET PASSWORD to work as expected.
Also create a second all-privilege account for the user that owns
datadir (and thus has full access to the data anyway).
Compile unix_socket plugin statically into the server.
Diffstat (limited to 'cmake/build_configurations')
-rw-r--r-- | cmake/build_configurations/mysql_release.cmake | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/cmake/build_configurations/mysql_release.cmake b/cmake/build_configurations/mysql_release.cmake index 105855a0bd1..4b399a131f5 100644 --- a/cmake/build_configurations/mysql_release.cmake +++ b/cmake/build_configurations/mysql_release.cmake @@ -98,17 +98,20 @@ ELSEIF(RPM) SET(CHECKMODULE /usr/bin/checkmodule CACHE STRING "") SET(SEMODULE_PACKAGE /usr/bin/semodule_package CACHE STRING "") SET(WITH_LIBARCHIVE ON CACHE STRING "") + SET(PLUGIN_AUTH_SOCKET YES) ELSEIF(DEB) SET(WITH_SSL system CACHE STRING "") SET(WITH_ZLIB system CACHE STRING "") SET(WITH_LIBWRAP ON) SET(HAVE_EMBEDDED_PRIVILEGE_CONTROL ON) SET(WITH_LIBARCHIVE ON CACHE STRING "") + SET(PLUGIN_AUTH_SOCKET YES) ELSE() SET(WITH_SSL bundled CACHE STRING "") SET(WITH_ZLIB bundled CACHE STRING "") SET(WITH_JEMALLOC static CACHE STRING "") SET(WITH_LIBARCHIVE STATIC CACHE STRING "") + SET(PLUGIN_AUTH_SOCKET STATIC) ENDIF() IF(NOT COMPILATION_COMMENT) |