As passwordless MariaDB root account is not enabled all debconf lines

regarding asking and setting passwords could be removed.

Author: ottok

debian/changelog

@@ -1,6 +1,10 @@
 mariadb-10.0 (10.0.16-1~exp3) experimental; urgency=low
 
   * Update the mail.ssl test to match new cacert.pem
+  * Stop asking and setting a database root user password. Instead enable
+    the auth_socket plugin and let unix user root access MariaDB without
+    a separate password. Admins using sudo or cron scripts can use the
+    same access too, and there is no debian-sys-maint password either anymore.
 
  -- Otto Kekäläinen <[email protected]>  Fri, 30 Jan 2015 18:52:55 +0200
 

debian/mariadb-server-10.0.config

@@ -12,34 +12,3 @@ if test -n "`which ypwhich 2>/dev/null`"  &&  ypwhich >/dev/null 2>&1; then
   db_input high mariadb-server-10.0/nis_warning || true
   db_go
 fi
-
-# Only ask this question on fresh installs or during "reconfiguration".
-# There is also an additional check for empty root passwords in the
-# postinst script.
-if [ "$1" = "configure" ] || [ "$1" = "reconfigure" ]; then
-  while :; do
-    RET=""
-    db_input high mariadb-server/root_password || true
-    db_go
-    db_get mariadb-server/root_password
-    # if password isn't empty we ask for password verification
-    if [ -z "$RET" ]; then
-      db_fset mariadb-server/root_password seen false
-      db_fset mariadb-server/root_password_again seen false
-      break
-    fi
-    ROOT_PW="$RET"
-    db_input high mariadb-server/root_password_again || true
-    db_go
-    db_get mariadb-server/root_password_again
-    if [ "$RET" == "$ROOT_PW" ]; then
-      ROOT_PW=''
-      break
-    fi
-    db_fset mariadb-server/password_mismatch seen false
-    db_input critical mariadb-server/password_mismatch
-    db_set mariadb-server/root_password ""
-    db_set mariadb-server/root_password_again ""
-    db_go
-  done
-fi

debian/mariadb-server-10.0.postinst

@@ -29,8 +29,6 @@ test_passwordless_root_login() {
 
 # call with $1 = "online" to connect to the server, otherwise it bootstraps
 set_mysql_rootpw() {
-       # forget we ever saw the password.  don't use reset to keep the seen status
-       db_set mariadb-server/root_password ""
 
        tfile=`mktemp`
        if [ ! -f "$tfile" ]; then
@@ -178,12 +176,11 @@ case "$1" in
     echo "$install_plugins"                                  | $MYSQL_BOOTSTRAP 2>&1 | $ERR_LOGGER
     set -e
     # overly complicated here but ensures a plugin unix_socket is installed and is idpotent if already installed
-    echo "SET sql_log_bin=0; USE mysql; DELIMITER //; CREATE PROCEDURE debian_plugin_install(IN plugin_name CHAR(50), IN soname CHAR(50)) BEGIN DECLARE CONTINUE HANDLER FOR NOT FOUND  EXECUTE 
-inst_plug; set @plugin_name=plugin_name; set @soname=soname ;set @install_plugin=CONCAT(\"INSTALL PLUGIN \",@plugin_name,\" SONAME '\", @soname, \"'\");PREPARE inst_plug FROM @install_plugin ; 
+    echo "SET sql_log_bin=0; USE mysql; DELIMITER //; CREATE PROCEDURE debian_plugin_install(IN plugin_name CHAR(50), IN soname CHAR(50)) BEGIN DECLARE CONTINUE HANDLER FOR NOT FOUND  EXECUTE
+inst_plug; set @plugin_name=plugin_name; set @soname=soname ;set @install_plugin=CONCAT(\"INSTALL PLUGIN \",@plugin_name,\" SONAME '\", @soname, \"'\");PREPARE inst_plug FROM @install_plugin ;
 select PLUGIN_NAME INTO @a from  information_schema.plugins where PLUGIN_NAME=@plugin_name AND PLUGIN_STATUS='ACTIVE' AND PLUGIN_TYPE='AUTHENTICATION' AND PLUGIN_LIBRARY LIKE concat(@soname,'%'
 ); DEALLOCATE PREPARE inst_plug; END// CALL debian_plugin_install('unix_socket', 'auth_socket') // DROP PROCEDURE debian_plugin_install//" | $MYSQL_BOOTSTRAP 2>&1 | $ERR_LOGGER
 
-     db_get mariadb-server/root_password && rootpw="$RET"
      if ! set_mysql_rootpw; then
          password_error="yes"
          # restore old config file if exists
@@ -212,10 +209,6 @@ esac
 # fails for any other reason, nothing happens.
 if [ "$1" = "configure" ]; then
        if test_passwordless_root_login; then
-               db_input medium mariadb-server/root_password || true
-               db_go
-               db_get mariadb-server/root_password && rootpw="$RET"
-
                if ! set_mysql_rootpw "online"; then
                        password_error="yes"
                fi

debian/mariadb-server-10.0.templates

@@ -44,18 +44,6 @@ _Description: Remove all MariaDB databases?
  recent version or if a different mariadb-server package is already
  using it, the data should be kept.
 
-Template: mariadb-server/root_password
-Type: password
-_Description: New password for the MariaDB "root" user:
- While not mandatory, it is highly recommended that you set a password
- for the MariaDB administrative "root" user.
- .
- If this field is left blank, the password will not be changed.
-
-Template: mariadb-server/root_password_again
-Type: password
-_Description: Repeat password for the MariaDB "root" user:
-
 Template: mariadb-server/error_setting_password
 Type: error
 _Description: Unable to set password for the MariaDB "root" user
@@ -69,11 +57,6 @@ _Description: Unable to set password for the MariaDB "root" user
  Please read the /usr/share/doc/mariadb-server-10.0/README.Debian file
  for more information.
 
-Template: mariadb-server/password_mismatch
-Type: error
-_Description: Password input error
- The two passwords you entered were not the same. Please try again.
-
 Template: mariadb-server/oneway_migration
 Type: boolean
 Default: true
@@ -84,4 +67,3 @@ _Description: Really migrate to MariaDB?
  Note that MariaDB has some enhanced features, which do not exist in MySQL
  and thus migration back to MySQL might not always work, at least not as
  automatically as migrating from MySQL to MariaDB.
-