mysql_secure_installation

mysql_secure_installation - MariaDB Knowledge Base

mysql_secure_installation

MariaDB starting with 10.4.6

From MariaDB 10.4.6, mariadb-secure-installation is a symlink to mysql_secure_installation.

MariaDB starting with 10.5.2

From MariaDB 10.5.2, mysql_secure_installation is the symlink, and mariadb-secure-installation the binary name.

ERROR 1698 (28000): Access denied for user 'root'@'localhost'

mysql - ERROR 1698 (28000): Access denied for user 'root'@'localhost' - Stack Overflow

Some systems like Ubuntu, mysql is using by default the UNIX auth_socket plugin.

Basically means that: db_users using it, will be "auth" by the system user credentias. You can see if your root user is set up like this by doing the following:

$ sudo mysql -u root # I had to use "sudo" since is new installation

mysql> USE mysql;
mysql> SELECT User, Host, plugin FROM mysql.user;

+------------------+-----------------------+
| User             | plugin                |
+------------------+-----------------------+
| root             | auth_socket           |
| mysql.sys        | mysql_native_password |
| debian-sys-maint | mysql_native_password |
+------------------+-----------------------+

As you can see in the query, the root user is using the auth_socket plugin

There are 2 ways to solve this:

You can set the root user to use the mysql_native_password plugin
You can create a new db_user with you system_user (recommended)

Option 1:

$ sudo mysql -u root # I had to use "sudo" since is new installation

mysql> USE mysql;
mysql> UPDATE user SET plugin='mysql_native_password' WHERE User='root';
mysql> FLUSH PRIVILEGES;
mysql> exit;

$ sudo service mysql restart

Option 2: (replace YOUR_SYSTEM_USER with the username you have)

$ sudo mysql -u root # I had to use "sudo" since is new installation

mysql> USE mysql;
mysql> CREATE USER 'YOUR_SYSTEM_USER'@'localhost' IDENTIFIED BY 'YOUR_PASSWD';
mysql> GRANT ALL PRIVILEGES ON *.* TO 'YOUR_SYSTEM_USER'@'localhost';
mysql> UPDATE user SET plugin='auth_socket' WHERE User='YOUR_SYSTEM_USER';
mysql> FLUSH PRIVILEGES;
mysql> exit;

$ sudo service mysql restart

Remember that if you use option #2 you'll have to connect to mysql as your system username (mysql -u YOUR_SYSTEM_USER)

Note: On some systems (e.g., Debian stretch) 'auth_socket' plugin is called 'unix_socket', so the corresponding SQL command should be: UPDATE user SET plugin='unix_socket' WHERE User='YOUR_SYSTEM_USER';

Update: from @andy's comment seems that mysql 8.x.x updated/replaced the auth_socket for caching_sha2_password I don't have a system setup with mysql 8.x.x to test this, however the steps above should help you to understand the issue. Here's the reply:

One change as of MySQL 8.0.4 is that the new default authentication plugin is 'caching_sha2_password'. The new 'YOUR_SYSTEM_USER' will have this auth plugin and you can login from the bash shell now with "mysql -u YOUR_SYSTEM_USER -p" and provide the password for this user on the prompt. No need for the "UPDATE user SET plugin" step. For the 8.0.4 default auth plugin update see, https://mysqlserverteam.com/mysql-8-0-4-new-default-authentication-plugin-caching_sha2_password/

No need of sudo

The database is initialised with 2 all-privilege accounts: the first one is "root" which is inaccessible and the second one with your user name (check with command whoami).

To enable access to root account, you need to login with your user name

mysql -u $(whoami)

and manually change password for root

use mysql;
set password for 'root'@'localhost' = password('YOUR_ROOT_PASSWORD_HERE');
flush privileges;
quit

mysql -u root -p

Permission denied AH01275: Can't open directory for index:

[username@localhost ~]$ chcon -R --reference=/var/www/html /home/username/folder1/folder2/

[username@localhost ~]$ sudo chcon -R --reference=/var/www/html /home/username/folder/folder2/

[username@localhost ~]$ sudo systemctl restart httpd

webhp

What exactly is https://www.google.com/webhp? I mean the webhp part. - Google Search Community

https://www.google.com/webhp is simply the Google Web Search Home Page. It is definitely a legitimate and safe URL.

(Similarly https://www.google.com/imghp is the Google Image Search Home Page)

shell script to create user accounts

shell script to create user accounts · GitHub

#!/bin/bash
	ROOT_UID=0
	SUCCESS=0
	E_USEREXISTS=70

	# Run as root, of course. (this might not be necessary, because we have to run the script somehow with root anyway)
	if [ "$UID" -ne "$ROOT_UID" ]
	then
	echo "Must be root to run this script."
	exit $E_NOTROOT
	fi

	#test, if both argument are there
	if [ $# -eq 2 ]; then
	username=$1
	pass=$2

	# Check if user already exists.
	grep -q "$username" /etc/passwd
	if [ $? -eq $SUCCESS ]
	then
	echo "User $username does already exist."
	echo "please chose another username."
	exit $E_USEREXISTS
	fi


	useradd -p `mkpasswd "$pass"` -d /home/"$username" -m -g users -s /bin/bash "$username"

	echo "the account is setup"

	else
	echo " this programm needs 2 arguments you have given $# "
	echo " you have to call the script $0 username and the pass "
	fi

	exit 0

Java Qui Nhon