Authentication plugin 'caching_sha2_password' reported error
目录
Authentication plugin 'caching_sha2_password' reported error
问题描述
mysql 主从复制,slave🔗master 报错:
Error connecting to source 'slave@192.168.10.1'. This was attempt 1/86400, with a delay of 30 seconds between attempts. Message: Authentication plugin 'caching_sha2_password' reported error: Authentication requires secure connection.
Error connecting to source 'slave@192.168.10.1:13306'. This was attempt 1/86400, with a delay of 30 seconds between attempts. Message: Authentication plugin 'caching_sha2_password' reported error: Authentication requires secure connection.
问题原因
mysql 8.0之后默认的认证方式变为caching_sha2_password
Caching SHA-2 Pluggable Authentication
MySQL provides two authentication plugins that implement SHA-256 hashing for user account passwords:
-
sha256_password
: Implements basic SHA-256 authentication. -
caching_sha2_password
: Implements SHA-256 authentication (likesha256_password
), but uses caching on the server side for better performance and has additional features for wider applicability.
This section describes the caching SHA-2 authentication plugin. For information about the original basic (noncaching) plugin, see Section 6.4.1.3, “SHA-256 Pluggable Authentication”.
Important
In MySQL 8.0, caching_sha2_password
is the default authentication plugin rather than mysql_native_password
. For information about the implications of this change for server operation and compatibility of the server with clients and connectors, see caching_sha2_password as the Preferred Authentication Plugin.
Important
To connect to the server using an account that authenticates with the caching_sha2_password
plugin, you must use either a secure connection or an unencrypted connection that supports password exchange using an RSA key pair, as described later in this section. Either way, the caching_sha2_password
plugin uses MySQL's encryption capabilities. See Section 6.3, “Using Encrypted Connections”.
Note
In the name sha256_password
, “sha256” refers to the 256-bit digest length the plugin uses for encryption. In the name caching_sha2_password
, “sha2” refers more generally to the SHA-2 class of encryption algorithms, of which 256-bit encryption is one instance. The latter name choice leaves room for future expansion of possible digest lengths without changing the plugin name.
详见官网
MySQL :: MySQL 8.0 Reference Manual :: 6.4.1.2 Caching SHA-2 Pluggable Authentication
解决方案
CHANGE MASTER TO GET_MASTER_PUBLIC_KEY=1;
重新start slave 连接成功
mysql> show slave status \G;
*************************** 1. row ***************************
Slave_IO_State: Waiting for source to send event
Master_Host: 192.168.10.1
Master_User: slave
Master_Port: 13306
Connect_Retry: 30
Master_Log_File: mall-mysql-bin.000003
Read_Master_Log_Pos: 712
Relay_Log_File: mall-relay-bin.000003
Relay_Log_Pos: 331
Relay_Master_Log_File: mall-mysql-bin.000003
Slave_IO_Running: Yes
Slave_SQL_Running: Yes
Replicate_Do_DB:
Replicate_Ignore_DB:
Replicate_Do_Table:
Replicate_Ignore_Table:
Replicate_Wild_Do_Table:
Replicate_Wild_Ignore_Table:
Last_Errno: 0
Last_Error:
Skip_Counter: 0
Exec_Master_Log_Pos: 712
Relay_Log_Space: 714
Until_Condition: None
Until_Log_File:
Until_Log_Pos: 0
Master_SSL_Allowed: No
Master_SSL_CA_File:
Master_SSL_CA_Path:
Master_SSL_Cert:
Master_SSL_Cipher:
Master_SSL_Key:
Seconds_Behind_Master: 0
Master_SSL_Verify_Server_Cert: No
Last_IO_Errno: 0
Last_IO_Error:
Last_SQL_Errno: 0
Last_SQL_Error:
Replicate_Ignore_Server_Ids:
Master_Server_Id: 101
Master_UUID: 9efa0464-2613-11ee-a524-0242ac110002
Master_Info_File: mysql.slave_master_info
SQL_Delay: 0
SQL_Remaining_Delay: NULL
Slave_SQL_Running_State: Replica has read all relay log; waiting for more updates
Master_Retry_Count: 86400
Master_Bind:
Last_IO_Error_Timestamp:
Last_SQL_Error_Timestamp:
Master_SSL_Crl:
Master_SSL_Crlpath:
Retrieved_Gtid_Set:
Executed_Gtid_Set:
Auto_Position: 0
Replicate_Rewrite_DB:
Channel_Name:
Master_TLS_Version:
Master_public_key_path:
Get_master_public_key: 1
Network_Namespace:
1 row in set, 1 warning (0.05 sec)