mysql_native_password.cc File Reference

#include "sql/auth/sql_authentication.h"
#include "crypt_genhash_impl.h"
#include "mysql/components/services/log_builtins.h"
#include "password.h"
#include "sql/auth/sql_auth_cache.h"
#include "sql/current_thd.h"
#include "sql/mysqld.h"
#include "sql/sql_class.h"

Macros
#define	LOG_COMPONENT_TAG   "mysql_native_password"

Functions
static void	native_password_authentication_deprecation_warning ()
static int	generate_native_password (char *outbuf, unsigned int *buflen, const char *inbuf, unsigned int inbuflen)
static int	validate_native_password_hash (char *const inbuf, unsigned int buflen)
static int	set_native_salt (const char *password, unsigned int password_len, unsigned char *salt, unsigned char *salt_len)
static int	compare_native_password_with_hash (const char *hash, unsigned long hash_length, const char *cleartext, unsigned long cleartext_length, int *is_error)
	Compare a clear text password with a stored hash for the native password plugin. More...
static int	native_password_authenticate (MYSQL_PLUGIN_VIO *vio, MYSQL_SERVER_AUTH_INFO *info)
	MySQL Server Password Authentication Plugin. More...
	mysql_declare_plugin (mysql_native_password)

Variables
static struct st_mysql_auth	native_password_handler
	mysql_declare_plugin_end

Macro Definition Documentation

LOG_COMPONENT_TAG

#define LOG_COMPONENT_TAG   "mysql_native_password"

Function Documentation

compare_native_password_with_hash()

static int compare_native_password_with_hash ( const char *  hash, unsigned long  hash_length, const char *  cleartext, unsigned long  cleartext_length, int *  is_error  )

static

Compare a clear text password with a stored hash for the native password plugin.

If the password is non-empty it calculates a hash from the cleartext and compares it with the supplied hash.

if the password is empty checks if the hash is empty too.

• hash pointer to the hashed data
• hash_length length of the hashed data
• cleartext pointer to the clear text password
• cleartext_length length of the cleat text password
• [out] is_error non-zero in case of error extracting the salt

  Return values

  0	the hash was created with that password
  non-zero	the hash was created with a different password

empty password results in an empty hash

generate_native_password()

static int generate_native_password ( char *  outbuf, unsigned int *  buflen, const char *  inbuf, unsigned int  inbuflen  )

static

mysql_declare_plugin()

mysql_declare_plugin

(

mysql_native_password

)

native_password_authenticate()

static int native_password_authenticate ( MYSQL_PLUGIN_VIO *  vio, MYSQL_SERVER_AUTH_INFO *  info  )

static

MySQL Server Password Authentication Plugin.

In the MySQL authentication protocol:

1. the server sends the random scramble to the client
2. client sends the encrypted password back to the server
3. the server checks the password.

native_password_authentication_deprecation_warning()

static void native_password_authentication_deprecation_warning ( )

static

set_native_salt()

static int set_native_salt ( const char *  password, unsigned int  password_len, unsigned char *  salt, unsigned char *  salt_len  )

static

validate_native_password_hash()

static int validate_native_password_hash ( char *const  inbuf, unsigned int  buflen  )

static

Variable Documentation

mysql_declare_plugin_end

mysql_declare_plugin_end

native_password_handler

struct st_mysql_auth native_password_handler

static

Initial value:

= {
    MYSQL_AUTHENTICATION_INTERFACE_VERSION,
    Cached_authentication_plugins::get_plugin_name(
        PLUGIN_MYSQL_NATIVE_PASSWORD),
    native_password_authenticate,
    generate_native_password,
    validate_native_password_hash,
    set_native_salt,
    AUTH_FLAG_USES_INTERNAL_STORAGE,
    compare_native_password_with_hash,
}