10

I'm trying to make the mysql client connect to a mysql server without requiring the password to be given interactively. Steps taken:

1) First create a mylogin.cnf file

$ mysql_config_editor set --user=<user> --password --host=<host>
Enter password:

2) File created successfully:

$ ls -la .mylogin.cnf
-rw-------. 1 urmt urmt  136 Dec 19 11:01 .mylogin.cnf
$ mysql_config_editor print --all
[client]
user = <user>
password = *****
host = <host>

3) Connect using mysql client

$ mysql <dbname>
ERROR 1045 (28000): Access denied for user '<user>'@'<host>' (using password: NO)

Is there a default value/configuration somewhere that makes the client ignore the password in mylogin.cnf? The user and host properties were read correctly from the file.

I am able to connect just fine if I provide the password on the command line:

$ mysql -p <dbname>
Enter password: 
Reading table information...
...
mysql>

MySQL client version is 5.6.22, MySQL Server version is 5.6.22, both on Oracle Linux 6. Client and server are on different hosts.

Thanks

|improve this question
1
+50

Any way you do this, you're probably going to have a password saved somewhere. Even MySQL 5.6 login-path is easily decryptable by anyone with the motivation. That warning said, this would be an easy solution.

In your environment script (eg ~/.profile or ~/.bashrc), set

alias mysql='mysql -uUser -pPasswd -hHostname'

(putting in your desired User, Passwd, and Hostname, of course.)

After shell relogin, you should be able to simply do

mysql

... which will use your alias and connect to the DB and ignore any passwords in .my.cnf files.

Security note: If there are other users on your server, you might want to chmod 700 your profile script so the password is not as easily accessed by others. Any admin with root or sudo will be able to see it still; no way around that.

|improve this answer
  • This is a work-around to the actual problem, but I'm fine this. I accept this answer with the disclaimer to future readers that the proper way to do it is the Nawaz answer, but that doesn't work on my environment for an unknown reason. Thanks! – Lefteris Koutsoloukas Mar 2 '15 at 8:11
  • -1 this neither answers the query of the OP nor does it avoid to store a password in a file. the password is now stored in .profile instead of .mylogin.cnf. But now the password is displayed by the ps command. – miracle173 Aug 5 '15 at 5:49
  • @miracle, please validate your claim that ps will reveal the password. On my systems, the password shows masked as xxxxxxx in the ps output. If your MySQL client is not acting like mine, please post which mysql version and distro are you running. And do you have a better answer to the OP's actual question? – Joshua Huber Aug 5 '15 at 6:41
  • 2
    @joshua: End-User Guidelines for Password Security: "Use a -pyour_pass or --password=your_pass option on the command line(...)This is convenient but insecure." – miracle173 Aug 5 '15 at 7:45
9

use following command to set login path first

mysql_config_editor set --login-path=lgpath --user=root -p
password

and then use below command to login mysql

mysql --login-path=lgpath

Help about mysql login path options can bee seen by

mysql_config_editor set --help

|improve this answer
  • I tried setting a login path explicitly as you suggested, but unfortunately it has the same behavior: $ mysql_config_editor print --all [lgpath] user = <user> password = ***** host = <host> $ mysql --login-path=lgpath ERROR 1045 (28000): Access denied for user '<user>'@'<host>' (using password: NO) – Lefteris Koutsoloukas Feb 2 '15 at 10:46
3

I had the same issue as OP, but the answers in this thread confused me. Vinay Mandala's link actually worked for me. Reposted here for clarity.

My issue:

ERROR 1045 (28000): Access denied for user '<user>'@'<host>' (using password: NO)

It proves that mysql_config_editor does not handle special characters in the password properly.

Solution:

When mysql_config_editor prompts you for the password, make sure that you surround the password in double quotes ("). Afterwards, you can login just fine.

|improve this answer
1

I was getting this error, except it said (using password: YES)

The reason as mentioned by Giovanni was because of a "#" in the password. I found that a workaround is to insert quotes around your password when prompted. The same restriction exists with plain-text passwords using .my.cnf.

|improve this answer
0

The Nawaz answer is correct. I have little to add. I suggest you do some attempts with the environment variable MYSQL_TEST_LOGIN_FILE to crate a new configuration file, just in case the default file is corrupt. Use also --no-defaults to skip .cnf files. If the password contains the char #, mysql login-path doesn't work.

$ export MYSQL_TEST_LOGIN_FILE=$HOME/mylogin.cnf

$ mysql_config_editor set --login-path=mytest --host=127.0.0.1 --port=5622 --user=mytest --password
Enter password:

$ ls -l $MYSQL_TEST_LOGIN_FILE
-rw------- 1 mysql mysql 288 Feb 27 14:25 mylogin.cnf

$ mysql --no-defaults --login-path=mytest test
|improve this answer
  • This environment variable was not set. I set it but I got exactly the same behavior. It ignored the password in mylogin.cnf. – Lefteris Koutsoloukas Mar 2 '15 at 8:11
  • Are you sure the user who exec mysql command is mysql? If not, change the owner of mylogin.cnf and it should works :) – Iazel Dec 21 '15 at 12:31
0

I am encountering a similar issue as the original poster. I suspect it has to do with characters in the password which do not get encrypted/decrypted properly.

To confirm try changing the password to something simple and see if this issue goes away.

|improve this answer
  • I had the same issue. As Plazgoth pointed out, i had a special character in the password and it was not working. What worked for me is the suggestion from the user bglad on this post – Vinay Mandala Jun 27 '18 at 14:08
0

I had this problem with a shell script. My script was changing the $HOME value and this caused the --login-path=*** to appear to be ignored. When I stopped changing the $HOME value then it started working.

|improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.