Prev Next Question 4/40 - 1Z0-888.v2019-10-20
You have the following in your my.cnf configuration file:
[mysqld]
default_authentication_plugin=sha256_password
You want to create a new user who will be connecting from the IP address 192.0.2.10, and you want to use the authentication plug-in that implements SHA-256 hashing for user account passwords.
Which two statements would create a user named webdesign for this IP address with the password of imbatman using a SHA_256 password hash? (Choose two.)
[mysqld]
default_authentication_plugin=sha256_password
You want to create a new user who will be connecting from the IP address 192.0.2.10, and you want to use the authentication plug-in that implements SHA-256 hashing for user account passwords.
Which two statements would create a user named webdesign for this IP address with the password of imbatman using a SHA_256 password hash? (Choose two.)
Comments (The most recent comments are at the top.)
Using SHA-256 Pluggable Authentication
To set up an account that uses the sha256_password plugin for SHA-256 password hashing, use the following statement, where password is the desired account password:
CREATE USER 'sha256user'@'localhost' IDENTIFIED WITH sha256_password BY 'password';
The server assigns the sha256_password plugin to the account and uses it to encrypt the password using SHA-256, storing those values in the plugin and authentication_string columns of the mysql.user system table.
The preceding instructions do not assume that sha256_password is the default authentication plugin. If sha256_password is the default authentication plugin, a simpler CREATE USER syntax can be used.
To start the server with the default authentication plugin set to sha256_password, put these lines in the server option file:
[mysqld]
default_authentication_plugin=sha256_password
That causes the sha256_password plugin to be used by default for new accounts. As a result, it is possible to create the account and set its password without naming the plugin explicitly:
CREATE USER 'sha256user'@'localhost' IDENTIFIED BY 'password';