Bug #15704 NO_AUTO_CREATE_USER and empty password

• Submitted: 13 Dec 2005 7:22
• Modified: 3 Aug 2006 13:01
• Reporter: Sergei Golubchik
• Status: Verified
• Category: MySQL Server: Security: Privileges
• Severity: S3 (Non-critical)
• Version: 5.0
• OS: Any
• CPU Architecture: Any

[13 Dec 2005 7:22] Sergei Golubchik

Description:
In NO_AUTO_CREATE_USER mode GRANT does not create users even if IDENTIFIED BY was provided, but the password was empty.

How to repeat:
SET @@sql_mode='NO_AUTO_CREATE_USER';
GRANT USAGE ON *.* TO foo@bar IDENTIFIED BY '';