Bug #79011 [Fbk->Asn]: MySQL caching_sha2_password Access denied for password with more than 20 chars

Edit report at https://bugs.php.net/bug.php?id=79011&edit=1 ID: 79011 User updated by: bendix dot ohlhauser at gmail dot com Reported by: bendix dot ohlhauser at gmail dot com Summary: MySQL caching_sha2_password Access denied for password with more than 20 chars -Status: Feedback +Status: Assigned Type: Bug Package: MySQLi related Operating System: Ubuntu 18 LTS PHP Version: 7.4.1 Assigned To: nikic Block user comment: N Private report: N New Comment: @nikic The MySQL assignee, did some testing and had some interesting notes. I'd recommend checking them out. (https://bugs.mysql.com/bug.php?id=98048) Btw, when will PHP 7.4.2 be available for Ubuntu 19? Previous Comments: ------------------------------------------------------------------------ [2019-12-27 16:43:25] nikic@php.net This should be fixed now. I'm going to leave this open for now until someone can confirm. (The fix is in the current 7.4 development branch and will be in 7.4.2.) ------------------------------------------------------------------------ [2019-12-27 15:45:33] nikic@php.net Related To: Bug #76243 ------------------------------------------------------------------------ [2019-12-27 15:44:23] nikic@php.net As you mention that logging in via shell fixes the issue, it seems unlikely that this is related to the password length. caching_sha2_password uses a cache (as the name implies) and has a different handshake depending on whether the cache is hit or not. Most likely you are running into an issue where you specify a default socket, but the actual connection uses TCP, resulting in mysqlnd mistakenly classifying it as a secure transport. This should be fixed once https://github.com/php/php-src/pull/5034 lands. ------------------------------------------------------------------------ [2019-12-27 15:24:47] bendix dot ohlhauser at gmail dot com A developer at Oracle said that this is a PHP issue. Not sure if he really looked into it. I personally would rather say it has probably something to do with MySQL, but I have very little understanding of the internals. @cmb Thanks for the hint, but there are 2 possible issues with it: - Why does it work after logging into MySQL CLI? - Is the error later 'converted' to "Access Denied"? I'd expect a different exception for that. Since I'm a unnecessary middle man, I'd suggest you should talk to the assignee at Oracle. I will say the same to him. I'd appreciate an update if you know the underlying issue or the issue has been fixed. ------------------------------------------------------------------------ [2019-12-23 09:05:31] cmb@php.net You might be hitting <https://github.com/php/php-src/blob/php-7.4.1/ext/mysqlnd/mysqlnd_auth.c#L798-L808>. ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at https://bugs.php.net/bug.php?id=79011 -- Edit this bug report at https://bugs.php.net/bug.php?id=79011&edit=1