mysql imposes a silent limit on passwords

Bug #1945013 reported by Ivan Popivanov
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
mysql-8.0 (Ubuntu)
Triaged
Wishlist
Unassigned

Bug Description

Install mysql-server package. When configuring, pass a password for root that is 90 symbols long. Try "mysql -u root -p" afterwards. There will be a password prompt, pasting the long password will return a login error. Succeeds for passwords of up to 32 characters.

There is no information online that MYSQL latest version limits passwords to 32 characters, except for replication. This is a standalone installation, so something is wrong.

It's time consuming to debug an issue like this so it needs to be addressed and clearly documented.

Revision history for this message
Sergio Durigan Junior (sergiodj) wrote :

Thank you for your report.

What I found online seems to indicate that even if you're not using MySQL Replication, the 32-char limit for passwords still apply. But I agree that the upstream documentation is a bit confusing in that regard.

In my opinion, this is a low priority bug that is better solved upstream. Would you be willing/able to open a bug against the upstream MySQL project and make a request for them to clarify this specific point in their documentation? If you do that, please provide a link to the upstream bug here as well.

Thank you.

Changed in mysql-8.0 (Ubuntu):
status: New → Triaged
importance: Undecided → Wishlist
Revision history for this message
Robie Basak (racb) wrote :

It might also be worth fixing debconf to reject any password that MySQL will reject. But that can only be done if upstream have clear documentation so that the debconf script can accurately predict that, so this needs Sergio's point above addressed first before any progress can be made in packaging.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.