Bug #32686 Windows installation includes extraneous accounts
Submitted: 23 Nov 2007 21:07 Modified: 23 Nov 2007 22:11
Reporter: Paul DuBois Email Updates:
Status: Duplicate Impact on me:
None 
Category:MySQL Server: Installing Severity:S3 (Non-critical)
Version:6.0.3 OS:Windows
Assigned to: CPU Architecture:Any

[23 Nov 2007 21:07] Paul DuBois
Description:
MySQL 6.0.3 on Windows installs accounts that have a Host value of production.mysql.com. These have nothing to do with the user's host and should not be installed.

How to repeat:
1) Install MySQL 6.0.3 using the installation wizard.

2) Decline the offer near the end of the installation process to configure the server, to leave the grant tables in their unaltered installation state.

3) Check which accounts were installed:

C:\Program Files\MySQL\MySQL Server 6.0\bin>mysql -uroot mysql
Welcome to the MySQL monitor. Commands end with ; or \g.
Your MySQL connection id is 1
Server version: 6.0.3-alpha-community-log MySQL Community Serve

Type 'help;' or '\h' for help. Type '\c' to clear the buffer.

mysql> select host,user,password from user;
+----------------------+------+----------+
| host | user | password |
+----------------------+------+----------+ |
localhost | root | |
| production.mysql.com | root | |
| 127.0.0.1 | root | |
| localhost | | |
| production.mysql.com | |
| +----------------------+------+----------+
5 rows in set (0.00 sec)

Note that there are two accounts for connecting from production.mysql.com. Users will not want these accounts, and might even conclude that we are installing "back door" accounts to allow connections from production to their server.

6.0.2 installed only the root@production.mysql.com account, but that shouldn't have been installed, either.

5.0.45 installed root@production account.
[23 Nov 2007 22:11] MySQL Verification Team
Thank you for the bug report. Looks like duplicate of bug:
http://bugs.mysql.com/bug.php?id=32219