Hi,
As the title says, we are experiencing an issue when attempting to update a global virtual server password whilst MariaDB is enabled.
After going into Edit Virtual Server > Configurable Settings > Password and setting it to a new value, the save operation completes successfully with no errors reported by Virtualmin. However, the WordPress installation on the virtual server still works even though it has not been updated to use the new password we just set, which was our first clue that something was going wrong.
When we updated WordPress to use the new password, it failed to connect to the database, which tells us that Virtualmin reported a false positive success message when in fact it did not change the database password at all (as the old password still works at this point).
Going into Webmin > Servers > MySQL Database Server > User Permissions, clicking on the username in question, and changing the password from that interface (rather than from the Edit Virtual Server interface) results in the following error: Column "select_priv" is not updatable.
We are running MariaDB 10.4.8 on the latest CentOS 7 x64 operating system with the latest release of Virtualmin (6.08 Professional) and Webmin (1.941). I thought Virtualmin had compatibility with MariaDB 10.4.x? Is there a way we can resolve this issue? Because of the nature of this bug we are currently unable to reliably change any virtual server passwords. This presents a possible security risk if we ever need to change virtual server passwords for reasons of a compromise or other related issue.
Thanks for any assistance provided! -Logan
Comments
Submitted by JEMEDIACORP on Sun, 03/08/2020 - 22:04 Pro Licensee Comment #1
Submitted by JEMEDIACORP on Sun, 03/08/2020 - 22:06 Pro Licensee Comment #2
Hi,
Thanks for the heads up.
Not completely yet. You can always update your password manually for now.
Jamie, do we have progress on supporting MariaDB 10.2+?
As a work-around, you can update it using Webmin/MySQL Database Server/User Permissions/Edit User/Password.
Submitted by JEMEDIACORP on Tue, 03/10/2020 - 10:26 Pro Licensee Comment #5
Ilia, please re-read my original post. In it, you'll see that the page you suggested (Webmin . Servers > MySQL Database Server > User Permissions) is exactly where I saw the error that caused this bug. So unfortunately the workaround you mentioned is exactly the problem I am having.
Okay, sorry, missed that. Then it's not a solution, as it seems only to work on MariaDB prior to 10.4.0.
Submitted by JEMEDIACORP on Tue, 03/10/2020 - 10:31 Pro Licensee Comment #7
For reference, here is the post on Virtualmin that mentions improved support for MariaDB 10.x, though it doesn't outright quote 10.4.x; I guess I just assumed it was compatible with this version. I am hopeful that the developers will implement a fix soon. https://www.virtualmin.com/node/67528
Submitted by JamieCameron on Thu, 03/12/2020 - 00:23 Comment #8
MariaDB 10.4 support in Webmin is still under development, but changing passwords in Virtualmin should work. I assume you are running version 6.08 there - if so, try upgrading to 6.09 when it comes out.
Submitted by JEMEDIACORP on Thu, 03/12/2020 - 00:39 Pro Licensee Comment #9
Yeah, I'm running 6.08 Pro on CentOS 7. I tried changing the password through Virtualmin > Edit Virtual Server > Configurable Settings > Administration password, and while Virtualmin did not throw any errors there, the password in MariaDB was never actually changed (even though the virtual server's FTP password was changed). Changing the password through Webmin > Servers > MySQL Database Server > User Permissions is where I see the error message.
This has been implemented in Webmin 1.960 and Virtualmin 6.13 is going to have support for it (MariaDB 10.4+ and MySQL 8+) too. Let us know if it works for you.
You can continue discussion here as well.