This is a story about why it's a good idea to test and verify the
behavior of new software releases, even if the change log says
that a particular bug was already fixed.
Background MySQL 5.6 and 5.7 both support the following CREATE
USER syntax:
CREATE USER 'user'@'host' IDENTIFIED BY 'password';
This syntax create a user with the default authentication plugin
(mysql_native_password unless configured otherwise) and the
password provided. The IDENTIFIED BY syntax is also supported for
GRANT command.
Both major versions also support the following syntax:
CREATE USER 'user'@'host' IDENTIFIED WITH mysql_native_password AS 'hash_string';
The password hash for "passw0rd" is "*74B1C21ACE0C2D6B0678A5E503D2A60E8F9651A3", you might then expect that the effects of the …
[Read more]