Whoa, even when I set a password I can get in without one:

MariaDB [vmail]> select user,host,password from mysql.user;
+------------+-----------+-------------------------------------------+
| user       | host      | password                                  |
+------------+-----------+-------------------------------------------+
| root       | localhost | *213E66B6DA9D8EA4C2489A99F8B553C3C4C3B0ED |
| root       | mail2     | *213E66B6DA9D8EA4C2489A99F8B553C3C4C3B0ED |
| root       | 127.0.0.1 | *213E66B6DA9D8EA4C2489A99F8B553C3C4C3B0ED |
| root       | ::1       | *213E66B6DA9D8EA4C2489A99F8B553C3C4C3B0ED |

Password is set, but:

# mysql -u root
Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is 43
Server version: 10.0.22-MariaDB-0ubuntu0.15.10.1 (Ubuntu)

Copyright (c) 2000, 2015, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MariaDB [(none)]>

And yes, I did "flush privileges', and no, there is no ".my.cnf".

This could be bad...

Weird. With iRedMail-0.9.3, iRedMail will generate (and set) a random and strong password for mysql root user automatically. Not sure why it doesn't work on your server, I need to try to reproduce this issue on my testing machine.

By the way, do you have a password in file "config" under iRedMail-0.9.3 directory?

I cannot reproduce this issue on my testing machine. Could you please show us FULL content of file iRedMail-0.9.3/runtime/install.log? Maybe there's something wrong when iRedMail tried to reset MYSQL root password.

Could you please show us FULL content of file iRedMail-0.9.3/runtime/install.log? Maybe there's something wrong when iRedMail tried to reset MYSQL root password.

No error during resetting MySQL root password. I have no idea yet.

I tried again on my testing machine (Ubuntu 15.10), cannot reproduce this issue.

Is it possible to setup a fresh/clean base server, and let me try the iRedMail installation? i'd like to add some debug option in iRedMail, maybe we can find something interesting.

I figured out why it happened. Please check file /etc/mysql/mariadb.conf.d/mysqld.cnf:

#
# * Unix socket authentication plugin
#
# Needed so the root database user can authenticate without a password but
# only when running as the unix root user.
#
# Also available for other users if required.
# See https://mariadb.com/kb/en/unix_socket-authentication-plugin/
plugin-load-add         = auth_socket.so

And:

MariaDB [mysql]> select User,Host,plugin from user where User='root';
+------+-----------+-------------+
| User | Host      | plugin      |
+------+-----------+-------------+
| root | localhost | unix_socket |
| root | u15       | unix_socket |
| root | 127.0.0.1 | unix_socket |
| root | ::1       | unix_socket |
+------+-----------+-------------+

If remove 'unix_socket' in `mysql.plugin` column, root user must login with a password.

Just run the sql command mentioned in my last post:

MariaDB [mysql]> select User,Host,plugin from user where User='root';

Hi,

I just did a fresh install on Ubuntu 16.04 LTS (Apache, Mysql), same issue, mysql -u root allow me to log in to mysql without password.

I did the

ALTER USER 'root'@'localhost' IDENTIFIED WITH mysql_native_password BY 'my_new_password';

and now if I do a mysql -u root -p
it asks for the password

But mysql -u root still lets me get in without one

Any idea ?

Hi Zhang,

Thanks for your response !

I have this inside :

[client]
user=root
password="my_correct_mysql_root_password"

But still, mysql -u root and voilà, I'm in....