79

I just installed Ubuntu 16.04 (Xenial Xerus) and installed web server on it. Everything works well, but I cannot access database. Even if I create new user and grant all privileges, I can't create database

In PHP I'm getting this error:

SQLSTATE[HY000] [1698] Access denied for user 'root'@'localhost'

When I try to login in terminal, it works, but in PHP and phpMyAdmin don't.

PHP Code:

protected $host = '127.0.0.1';
protected $db = 'dbname';
protected $name = 'root';
protected $pass = 'root';
protected $conn;
private static $settings = array(
    PDO::MYSQL_ATTR_INIT_COMMAND => 'SET NAMES utf8'
);

public function __construct() {
    try {
        $this->conn = new PDO("mysql:host=$this->host;dbname=$this->db", $this->name, $this->pass, self::$settings);
    } catch (PDOException $e) {
        echo $e->getMessage();
    }
}
9
  • There is no code...I just reinstalled the entire Ubuntu with web server, db and so... and now the one thing I need is to login through phpmyadmin or PHP under username root with password root...
    – lamka02sk
    Apr 26, 2016 at 12:04
  • post your new user creation & grant priv related code here. Apr 26, 2016 at 12:05
  • 2
    Creating user: CREATE USER 'username'@'localhost' IDENTIFIED BY 'pass'; and adding privileges: GRANT ALL PRIVILEGES ON * . * TO 'newuser'@'localhost'; then FLUSH PRIVILEGES;...when I do this, I can login but not create database....
    – lamka02sk
    Apr 26, 2016 at 12:07
  • Grant priv should like this as your user name is username : GRANT ALL PRIVILEGES ON * . * TO 'username'@'localhost'; Apr 26, 2016 at 12:09
  • I made a mistake while writing comment... As I said: I cant login as root anyway except terminal, but as new user I cant create database even with all privileges
    – lamka02sk
    Apr 26, 2016 at 12:12

16 Answers 16

140

It turns out you can't use the root user in 5.7 anymore without becoming a sudo'er. That means you can't just run mysql -u root anymore and have to do sudo mysql -u root instead.

That also means that it will no longer work if you're using the root user in a GUI (or supposedly any non-command line application). To make it work you'll have to create a new user with the required privileges and use that instead.

See this answer for more details.

4
  • 2
    so development setups everywhere have to now have an extra few steps done before coding can commence :( Jul 6, 2017 at 21:08
  • Oh man! I've spent around 3h debugging every single line of code... This is strange, because I have the same environment on multiple servers, and didn't ever get this error.
    – М.Б.
    May 29, 2019 at 13:44
  • i got the same problem with this specific version of mysql >> mysql Ver 15.1 Distrib 10.3.22-MariaDB, for debian-linux-gnu (x86_64) using readline 5.2. I have an older version and it accepts connection using root user, but sure it is not best practice. Apr 21, 2020 at 14:57
  • Is there a way to create a user via a PHP script instead of manually via the CLI?
    – bilogic
    Feb 26, 2022 at 16:17
124

These steps worked for me on several systems using Ubuntu 16.04 (Xenial Xerus), Apache 2.4, MariaDB, and PDO:

  1. Log into MYSQL as root

     mysql -u root
    
  2. Grant privileges. For a new user, execute:

     CREATE USER 'newuser'@'localhost' IDENTIFIED BY 'password';
     GRANT ALL PRIVILEGES ON *.* TO 'newuser'@'localhost';
     FLUSH PRIVILEGES;
    

    UPDATE for Google Cloud Instances

    MySQL on Google Cloud seem to require an alternate command (mind the backticks).

     GRANT ALL PRIVILEGES ON `%`.* TO 'newuser'@'localhost';
    

    NOTE: Depending on wether your new user should be able to grant all privileges to other users as well you could extend the command by the GRANT WITH option. Please be aware that this exposes your user to be sudoer and hence become a higher security risk.

     GRANT ALL PRIVILEGES ON `%`.* TO 'newuser'@'localhost' GRANT WITH OPTION;
    
  3. Bind to all addresses:

    The easiest way is to comment out the line in your /etc/mysql/mariadb.conf.d/50-server.cnf or /etc/mysql/mysql.conf.d/mysqld.cnf file, depending on what system you are running:

      #bind-address = 127.0.0.1
    
  4. Exit MySQL and restart MySQL

      exit
      service mysql restart
    

By default it binds only to localhost, but if you comment the line it binds to all interfaces it finds. Commenting out the line is equivalent to bind-address=*.

To check the binding of the MySQL service, execute as root:

netstat -tupan | grep mysql
3
  • I just executed this on a MariaDB 10* with a user starting with a "i". This results in a weird syntax error on " 'i "...it interprets that as a i accent aigu Í...and retuns the syntax error. odd. I thought I drop that here. May 5, 2021 at 13:01
  • 1
    Might want to add the WITH GRANT OPTION ... stackoverflow.com/q/50177216/1815624
    – CrandellWS
    Nov 17, 2021 at 20:10
  • 1
    @CrandellWS thanks - added
    – leopold
    Nov 18, 2021 at 11:33
44

Use:

sudo mysql -u root

And now in the MySQL client:

use mysql;
update user set plugin='' where User='root';
flush privileges;
\q

Now you should be able to log in as root in phpMyAdmin.

(It was found here.)

9
  • 2
    This solution was successful when installing Nextcloud on Debian Stretch
    – ste
    Nov 5, 2017 at 17:29
  • 5
    @Matematikisto this you command has generated a big problem for me, now after your commendations, I can not even access mysql with the mysql command, error: mysql ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: NO) Jan 1, 2018 at 17:26
  • 3
    @Matematikisto my mysql worked perfectly before your command, I was just trying to login as phpmyadmin root, and now I can not even use the mysql console via terminal and not even use any re-configuration hint taught in the forums, each command having, is a different error, where before your command all was well! Jan 1, 2018 at 17:57
  • 1
    Worked for me on Ubuntu 18.04 with MariaDB 10.1
    – betasux
    Aug 15, 2018 at 10:47
  • 1
    @ArianeMartinsGomesDoRego For the problem of Access denied for user 'root'@'localhost' (using password: NO), try mysql -u root -p instead of mysql -u root. And @Matematikisto 's original answer solves my problem.
    – CocoaBob
    Sep 6, 2018 at 19:52
12

To create a user for phpMyAdmin:

sudo mysql -p -u root

Now you can add a new MySQL user with the username of your choice.

CREATE USER 'USERNAME'@'%' IDENTIFIED BY 'PASSWORD';

And finally grant superuser privileges to the user you just created.

GRANT ALL PRIVILEGES ON *.* TO 'USERNAME'@'%' WITH GRANT OPTION;
0
8

In short, in MariaDB:

  1. sudo mysql -u root;
  2. use mysql;
  3. UPDATE mysql.user SET plugin = 'mysql_native_password', Password = PASSWORD('pass1234') WHERE User = 'root';
  4. FLUSH PRIVILEGES;
  5. exit;
3
  • Thanks so much! This step worked for me, and I searched for more than an hour. I'm sorry I only have one upvote to give you :-) Dec 9, 2020 at 19:46
  • 1) Why line numbers? Make it completely copy/paste. 2) And if you need to specify 'root' with mysql command you already have problems - it will prompt for a password - which will be wrong for auth-sockets. sudo su - then mysql is all you need if using auth-socket. It will use the current user login access for mysql access. Please correct it. sudo mysql -u root; should be sudo su - (if not root) then simply mysql. You don't need a semicolon for shell command line completion - enter is enough. It's redundant.
    – B. Shea
    Oct 1, 2021 at 17:31
  • Also your mysql UPDATE statement is not going to work on newer versions. After logging in as root to mysql: ALTER USER 'root'@'localhost' IDENTIFIED WITH mysql_native_password BY 'root'; THEN ALTER USER 'root'@'localhost' IDENTIFIED BY 'pass1234'; THEN FLUSH..
    – B. Shea
    Oct 1, 2021 at 17:44
7

ALTER USER or DROP the user and create again works perfectly.

DROP USER root@localhost;
CREATE USER root@localhost IDENTIFIED BY 'root_password';
GRANT ALL PRIVILEGES ON *.* TO 'root'@'localhost';
FLUSH PRIVILEGES;
1
  • omg.. this was killing me; some apps were able to connect using root@localhost & some weren't. THANKS!
    – Reece
    Feb 9 at 0:18
4

MySQL makes a difference between "localhost" and "127.0.0.1".

It might be possible that 'root'@'localhost' is not allowed because there is an entry in the user table that will only allow root login from 127.0.0.1.

This could also explain why some application on your server can connect to the database and some not because there are different ways of connecting to the database. And you currently do not allow it through "localhost".

0
4

Just create a new user for MySQL; do not use root. There is a problem with its security issues:

sudo mysql -p -u root

Log in into MySQL or MariaDB with root privileges

CREATE USER 'troy121'@'%' IDENTIFIED BY 'mypassword123';

Log in and create a new user:

GRANT ALL PRIVILEGES ON *.* TO 'magento121121'@'%' WITH GRANT OPTION;

And grant privileges to access "." and "@" "%" any location, not just only 'localhost'.

exit;

If you want to see your privilege table, SHOW GRANTS; and enjoy.

1

With MySQL client version 14.14 and Distrib 5.7.22, the update statement is now:

update user set authentication_string=password('1111') where user='root';
1

If you are receiving that error even after creating a new user and assigning them the database privileges, then the one last thing to look at is to check if the users have been assigned the privileges in the database.

To do this, log into to your MySQL client (this is presumably the application that has restricted access to the database, but you as a root can be able to access your database table via mysql -u user -p).

Commands to apply

mysql -u root -p

password: (provide your database credentials)

On successful login, type

use mysql;

from this point, check each user's privileges if it is enabled from the database table as follows:

select User,Grant_priv,Host from db;

If the values of the Grant_priv col for the created user is N, update that value to Y with the following command:

UPDATE db SET Grant_priv = "Y" WHERE User= "your user";

With that, now try accessing the application and making a transaction with the database.

1

I had the same problem in my Ubuntu 20.04 (Focal Fossa) and MySQL 8.0 and I do these steps:

  1. log in to MySQL

    sudo mysql -p -u root
    
  2. Show the users added to MySQL

    SELECT user,plugin,host FROM mysql.user
    
  3. Change the root user plugin from auth_socket to mysql_native_password

    ALTER USER 'root'@'localhost' IDENTIFIED WITH mysql_native_password BY 'root';
    
  4. Flush the privileges

    FLUSH PRIVILEGES;
    
  5. Ctrl + z to exit from MySQL

  6. Restart your MySQL service

    sudo service MySQL restart
    
  7. Check your phpMyAdmin page and try to log in.

1
  • 1
    I actually had two root users with different plugin and when i removed one with auth_socket i was able to login again. May 6, 2022 at 7:20
1
sudo mysql -u root
mysql> USE mysql;
mysql> UPDATE user SET plugin='mysql_native_password' WHERE User='root';
mysql> FLUSH PRIVILEGES;
mysql> exit;
service mysql restart

After restarting mysql server reload the app please.

1

None from this question reply that solving my problem but i got super easy to solving that problem!

Just open file DEBIAN.CNF :

/etc/mysql/debian.cnf

You will find default sys admin user and pass! login with this account on your PhpMyAdmin then create new user etc whatever you want!

# Automatically generated for Debian scripts. DO NOT TOUCH!
[client]
host     = localhost
user     = debian-sys-maint
password = 8pTMhYuRMW6jmMG1
socket   = /var/run/mysqld/mysqld.sock
[mysql_upgrade]
host     = localhost
user     = debian-sys-maint
password = 8pTMhYuRMW6jmMG1
socket   = /var/run/mysqld/mysqld.sock
0

Users for MySQL and for server are two different things. Look how to add a user to the database and log in with these credentials.

1
  • 1
    OK, this is what I tried, but I can't create database even if I made second account with all privileges. Also I reinstalled server several times...
    – lamka02sk
    Apr 26, 2016 at 12:01
0

Use:

sudo mysql -u root
mysql> CREATE USER 'sample'@'localhost' IDENTIFIED BY 'Secure1pass!';
mysql> CREATE DATABASE testdb;
mysql> GRANT ALL PRIVILEGES ON testdb . * TO 'sample'@'localhost';

In case you just want to use your MySQL server on Ubuntu locally and want to connect with your application to a database.

1
  • 1
    Your answer could be improved with additional supporting information. Please edit to add further details, such as citations or documentation, so that others can confirm that your answer is correct. You can find more information on how to write good answers in the help center.
    – Community Bot
    Oct 3, 2021 at 10:52
0

I had 'user'@'%' with all privileges when getting the same error mentioning 'user'@'localhost' denied access. So I create 'user'@'localhost' with all privileges, and then flush, and even restart services to no avail.

At last I changed $host = '127.0.0.1'; to $host = 'localhost';. Now it works!

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.