Bug #79011 [Asn]: MySQL caching_sha2_password Access denied for password with more than 20 chars

Edit report at https://bugs.php.net/bug.php?id=79011&edit=1 ID: 79011 User updated by: bendix dot ohlhauser at gmail dot com Reported by: bendix dot ohlhauser at gmail dot com Summary: MySQL caching_sha2_password Access denied for password with more than 20 chars Status: Assigned Type: Bug Package: MySQLi related Operating System: Ubuntu 18 LTS -PHP Version: 7.4.1 +PHP Version: 7.4.2 Assigned To: nikic Block user comment: N Private report: N New Comment: PHP 7.4.2 was released today. I updated my system - same issue. Guess I'm waiting for PHP 7.4.3 :D Please, before the next release test yourself. It's a really easy setup (example for Ubuntu 19): apt update apt upgrade # Apache2 apt install apache2 # PHP 7.4 add-apt-repository ppa:ondrej/php apt update apt install php7.4-common php7.4-mysqli libapache2-mod-php7.4 # MySQL 8 wget -c https://repo.mysql.com//mysql-apt-config_0.8.13-1_all.deb dpkg -i mysql-apt-config_0.8.13-1_all.deb rm mysql-apt-config_0.8.13-1_all.deb apt update apt install mysql-server mysql -u root CREATE USER 'php'@'localhost' IDENTIFIED WITH caching_sha2_password BY 'Test123+++!!!'; GRANT ALL PRIVILEGES ON mysql.* TO 'php'@'localhost'; FLUSH PRIVILEGES; QUIT # download test script from this answer: https://stackoverflow.com/a/59449405/4180937 # replace "const DB_NAME = 'test_db';" with "const DB_NAME = 'mysql';" php test.php --- The script will fail with "Access denied", if the bug is still present. If the bug has been fixed it should print "Done.". Previous Comments: ------------------------------------------------------------------------ [2019-12-28 20:39:26] bugreports at gmail dot com > Btw, when will PHP 7.4.2 be available for Ubuntu 19 probably never because most distributions are that stupid to think know anything better than upstream and cherry pick fixes or not ------------------------------------------------------------------------ [2019-12-28 20:37:03] bendix dot ohlhauser at gmail dot com @nikic The MySQL assignee, did some testing and had some interesting notes. I'd recommend checking them out. (https://bugs.mysql.com/bug.php?id=98048) Btw, when will PHP 7.4.2 be available for Ubuntu 19? ------------------------------------------------------------------------ [2019-12-27 16:43:25] nikic@php.net This should be fixed now. I'm going to leave this open for now until someone can confirm. (The fix is in the current 7.4 development branch and will be in 7.4.2.) ------------------------------------------------------------------------ [2019-12-27 15:45:33] nikic@php.net Related To: Bug #76243 ------------------------------------------------------------------------ [2019-12-27 15:44:23] nikic@php.net As you mention that logging in via shell fixes the issue, it seems unlikely that this is related to the password length. caching_sha2_password uses a cache (as the name implies) and has a different handshake depending on whether the cache is hit or not. Most likely you are running into an issue where you specify a default socket, but the actual connection uses TCP, resulting in mysqlnd mistakenly classifying it as a secure transport. This should be fixed once https://github.com/php/php-src/pull/5034 lands. ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at https://bugs.php.net/bug.php?id=79011 -- Edit this bug report at https://bugs.php.net/bug.php?id=79011&edit=1