Bug #96816 Existing Users forced to re-enter password, upon entering the pwd, does not work

• Submitted: 10 Sep 2019 8:00
• Modified: 10 Sep 2019 16:27
• Reporter: Chakkaravarthy Arunachalam
• Status: Not a Bug
• Category: MySQL Server
• Severity: S2 (Serious)
• OS: Any
• Assigned to: MySQL Verification Team
• CPU Architecture: Any

[10 Sep 2019 8:00] Chakkaravarthy Arunachalam

Description:
Existing Users were disconnected automatically and forced to re-enter the password, upon entering the password, getting the ERROR 1045 (28000): Access denied for user error. The only resolution seems to work is to reset the password of existing users. Users who's password were recently updated or users recently created do not seem to be impacted by this.

How to repeat:
Not reproducible but can be demo'd

Suggested fix:
Reset the password of the impacted user.

[10 Sep 2019 9:38] MySQL Verification Team

Hi,

This is not a bug. The passwords expired. Please read more here:

https://dev.mysql.com/doc/refman/8.0/en/expired-password-handling.html

[10 Sep 2019 16:15] Chakkaravarthy Arunachalam

Thank you so much for the response. Some of the users who were kicked out are less than 180 days old (Since the default_password_lifetime=180 is set in our system). Also, I noticed more than 10 users (out of the total of 15 users) were kicked out yesterday at GMT 12 am signifying the next day switch which makes me think somehow password expiration is partially connected with this.

Any input is appreciated.

[10 Sep 2019 16:27] Chakkaravarthy Arunachalam

Also to add, for the users unable to login, the password_expired value in the User table is 'N'.