MySQL allows connection without password although password is set
mysql, passwords
Solution
Facepalm. It turned out there was a .my.cnf on /root with username and password, and so it was possible to login only with `mysql` when using the root account (that's what I was using). It was created by a Chef recipe (percona was installed via Chef) and I wasn't aware of it.
The hint was to look at the output of `show grants`. Even though I entered no password it still said I entered one, so there must be one somewhere!
Problem
I'm setting a MySQL server (actually a Percona server, but that shouldn't matter) and I'm setting a password to the root user. At the end, I have this: ``` mysql> select host, user, password from user; +-----------+------------------+-------------------------------------------+ | host | user | password | +-----------+------------------+-------------------------------------------+ | localhost | root | *huge string here, no kidding | | localhost | debian-sys-maint | *another huge string here | +-----------+------------------+-------------------------------------------+ 2 rows in set (0.00 sec) ``` I thought this should not allow the root user to connect without a password. However, if I go to the command line, I can connect with `mysql -u root` or just `mysql`. If I do `mysql -u root -p` and hit enter for the password, then I get `ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: NO).` Could anyone explain to me how to make sure a user can only connect with a password? Edit: if relevant, I set the password with `SET PASSWORD FOR 'root'@'localhost' = PASSWORD('somethinghere');` Edit: output of `show grants`, it indicates I used a password to login but I did not. ``` mysql> show grants; +----------------------------------------------------------------------------------------------------------------------------------------+ | Grants for root@localhost | +----------------------------------------------------------------------------------------------------------------------------------------+ | GRANT ALL PRIVILEGES ON *.* TO 'root'@'localhost' IDENTIFIED BY PASSWORD '*huge string here, no kidding' WITH GRANT OPTION | | GRANT PROXY ON ''@'' TO 'root'@'localhost' WITH GRANT OPTION | +----------------------------------------------------------------------------------------------------------------------------------------+ 2 rows in set (0.00 sec) ```