[转帖]命令行非明文密码连接 TiDB

https://tidb.net/blog/6794a34b#%E6%96%B9%E5%BC%8F%E4%B8%80%EF%BC%9A%E5%91%BD%E4%BB%A4%E8%A1%8C%E8%BE%93%E5%85%A5%E6%96%B9%E5%BC%8F

方式一：命令行输入方式

[root@iZuf6d7xln13sovvijl68rZ ~]# mysql -uroot -P4000 -h10.0.0.86

ERROR 1045 (28000): Access denied for user 'root'@'10.0.0.83' (using password: NO)

[root@iZuf6d7xln13sovvijl68rZ ~]# mysql -uroot -P4000 -h10.0.0.86 -p

Enter password:

Welcome to the MariaDB monitor.  Commands end with ; or \g.

Your MySQL connection id is 691323

Server version: 5.7.25-TiDB-v6.1.0-alpha TiDB Server (Apache License 2.0) Community Edition, MySQL 5.7 compatible

Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MySQL [(none)]>

正常方式下需要通过 -p 输入密码的方式连接 TiDB。

方式二：环境变量方式

[root@iZuf6d7xln13sovvijl68rZ ~]# export MYSQL_PWD=passw0RD

[root@iZuf6d7xln13sovvijl68rZ ~]# mysql -uroot -P4000 -h10.0.0.86

Welcome to the MariaDB monitor.  Commands end with ; or \g.

Your MySQL connection id is 691477

Server version: 5.7.25-TiDB-v6.1.0-alpha TiDB Server (Apache License 2.0) Community Edition, MySQL 5.7 compatible

Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MySQL [(none)]>

通过设定 MYSQL_PWD 环境变量方式，可以直接在命令行连接时传入密码，不需要指定 -p 选项。

取消 MYSQL_PWD 环境变量设置的步骤如下:

[root@iZuf6d7xln13sovvijl68rZ ~]# export MYSQL_PWD=

[root@iZuf6d7xln13sovvijl68rZ ~]# mysql -uroot -P4000 -h10.0.0.86

ERROR 1045 (28000): Access denied for user 'root'@'10.0.0.83' (using password: NO)

方式三：配置文件方式

在 /etc/my.cnf 配置下添加 [mysql] 对应的配置

[root@iZuf6d7xln13sovvijl68rZ ~]# head -n2 /etc/my.cnf

[mysql]

password=passw0RD

[root@iZuf6d7xln13sovvijl68rZ ~]# mysql -uroot -P4000 -h10.0.0.86

Welcome to the MariaDB monitor.  Commands end with ; or \g.

Your MySQL connection id is 691787

Server version: 5.7.25-TiDB-v6.1.0-alpha TiDB Server (Apache License 2.0) Community Edition, MySQL 5.7 compatible

Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MySQL [(none)]>

取消设置只需要将 my.cnf 中的配置文件删除即可。

方式四：mysql_config_editor 方式

[root@iZuf6d7xln13sovvijl68rZ ~]# ./mysql_config_editor print --all

[root@iZuf6d7xln13sovvijl68rZ ~]# ./mysql_config_editor set --login-path=test --user=root  --host=10.0.0.83 --port=3000 --password

Enter password:

[root@iZuf6d7xln13sovvijl68rZ ~]# ./mysql_config_editor print --all

[test]

user = root

password = *****

host = 10.0.0.83

port = 3000

[root@iZuf6d7xln13sovvijl68rZ ~]# cat /root/.mylogin.cnf

        ��2"�

�?��│�Ũ�ٹ    De����6ɡ⎽�_ �▒ȍ ;

         ]��┐�

↑ �/F?;d��J

⎻[⎼⎺⎺├@☃Z┤°6d7│┌┼13⎽⎺┴┴☃┘┌68⎼Z ·]#

[root@iZuf6d7xln13sovvijl68rZ ~]# ./mysql --login-path=test

Welcome to the MySQL monitor.  Commands end with ; or \g.

Your MySQL connection id is 753

Server version: 5.7.25-TiDB-v6.1.0-alpha TiDB Server (Apache License 2.0) Community Edition, MySQL 5.7 compatible

Copyright (c) 2000, 2022, Oracle and/or its affiliates.

Oracle is a registered trademark of Oracle Corporation and/or its

affiliates. Other names may be trademarks of their respective

owners.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

mysql> \q

取消设置按照如下步骤：

[root@iZuf6d7xln13sovvijl68rZ ~]# ./mysql_config_editor remove --login-path=test

[root@iZuf6d7xln13sovvijl68rZ ~]# ./mysql_config_editor print --all

[root@iZuf6d7xln13sovvijl68rZ ~]#

方式五：Socket 方式连接

Socket 方式只能本地连接

[root@iZuf6d7xln13sovvijl68rZ scripts]# cd /tidb-deploy/tidb-3000/scripts

[root@iZuf6d7xln13sovvijl68rZ scripts]# cat run_tidb.sh

#!/bin/bash

set -e

# WARNING: This file was auto-generated. Do not edit!

#          All your edit might be overwritten!

DEPLOY_DIR=/tidb-deploy/tidb-3000

cd "${DEPLOY_DIR}" || exit 1

exec env GODEBUG=madvdontneed=1 bin/tidb-server \

    -P 3000 \

    --status="10080" \

    --host="0.0.0.0" \

    --advertise-address="10.0.0.83" \

    --store="tikv" \

    --initialize-insecure \

    --path="10.0.1.185:2379,10.0.2.29:2379,10.0.0.88:2379" \

    --log-slow-query="/tidb-deploy/tidb-3000/log/tidb_slow_query.log" \

    --config=conf/tidb.toml \

    --socket="/tidb-deploy/tidb-3000/tidb.sock" \

    --log-file="/tidb-deploy/tidb-3000/log/tidb.log" 2>> "/tidb-deploy/tidb-3000/log/tidb_stderr.log"

[root@iZuf6d7xln13sovvijl68rZ scripts]# tiup cluster restart tidb-prod -N 10.0.0.83:3000

[root@iZuf6d7xln13sovvijl68rZ scripts]# ps -ef | grep tidb-server

root     15153     1  4 17:25 ?        00:00:00 bin/tidb-server -P 3000 --status=10080 --host=0.0.0.0 --advertise-address=10.0.0.83 --store=tikv --initialize-insecure --path=10.0.1.185:2379,10.0.2.29:2379,10.0.0.88:2379 --log-slow-query=/tidb-deploy/tidb-3000/log/tidb_slow_query.log --config=conf/tidb.toml --socket=/tidb-deploy/tidb-3000/tidb.sock --log-file=/tidb-deploy/tidb-3000/log/tidb.log

root     15292 12885  0 17:26 pts/9    00:00:00 grep --color=auto tidb-server

[root@iZuf6d7xln13sovvijl68rZ scripts]# ll /tidb-deploy/tidb-3000/tidb.sock

srwxr-xr-x 1 root root 0 5月   5 17:25 /tidb-deploy/tidb-3000/tidb.sock

[root@iZuf6d7xln13sovvijl68rZ scripts]# mysql -uroot -hlocalhost -S /tidb-deploy/tidb-3000/tidb.sock

Welcome to the MariaDB monitor.  Commands end with ; or \g.

Your MySQL connection id is 403

Server version: 5.7.25-TiDB-v6.1.0-alpha TiDB Server (Apache License 2.0) Community Edition, MySQL 5.7 compatible

Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MySQL [(none)]> show processlist;

+------+------+-----------+------+---------+------+------------+------------------+

| Id   | User | Host      | db   | Command | Time | State      | Info             |

+------+------+-----------+------+---------+------+------------+------------------+

|  403 | root | localhost | NULL | Query   |    0 | autocommit | show processlist |

+------+------+-----------+------+---------+------+------------+------------------+

1 row in set (0.00 sec)