executor: disable password validation for tidb_auth_token users | tidb-test=pr/2136

[CbcWestwolf]

What problem does this PR solve?

Issue Number: close #44098

Problem Summary:

Password validation should only take effect for users that authenticate with a password, like mysql_native_password, caching_sha2_password and tidb_sm3_password

What is changed and how it works?

Disable password validation for users without clear text password

Check List

Tests

• Unit test
• Integration test
• Manual test (add detailed scripts or steps below)
• No code

Side effects

• Performance regression: Consumes more CPU
• Performance regression: Consumes more Memory
• Breaking backward compatibility

Documentation

• Affects user behaviors
• Contains syntax changes
• Contains variable changes
• Contains experimental features
• Changes MySQL compatibility

Release note

Fix a bug that validates passwords for users with `tidb_auth_token`

[ti-chi-bot]

[REVIEW NOTIFICATION]

This pull request has been approved by:

• hawkingrei
• xhebox

To complete the pull request process, please ask the reviewers in the list to review by filling /cc @reviewer in the comment.
After your PR has acquired the required number of LGTMs, you can assign this pull request to the committer in the list by filling /assign @committer in the comment to help you merge this pull request.

The full list of commands accepted by this bot can be found here.

Reviewer can indicate their review by submitting an approval review.
Reviewer can cancel approval by submitting a request changes review.

[CbcWestwolf]

/retest all

[ti-chi-bot]

@CbcWestwolf: The /retest command does not accept any targets.
The following commands are available to trigger required jobs:

• /test build
• /test canary-scan-security
• /test check-dev
• /test check-dev2
• /test mysql-test
• /test pull-integration-mysql-test
• /test unit-test

Use /test all to run the following jobs that were automatically triggered:

• pingcap/tidb/ghpr_build
• pingcap/tidb/ghpr_check
• pingcap/tidb/ghpr_check2
• pingcap/tidb/ghpr_mysql_test
• pingcap/tidb/ghpr_unit_test

In response to this:

/retest all

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[CbcWestwolf]

/retest

[CbcWestwolf]

/cc xhebox hawkingrei
PTAL

[hawkingrei]

/merge

[ti-chi-bot]

This pull request has been accepted and is ready to merge.

Commit hash: 876452f

[CbcWestwolf]

/retest-required

[hawkingrei]

/retest

[ti-chi-bot]

In response to a cherrypick label: new pull request created to branch release-7.1: #44142.

[ti-chi-bot]

In response to a cherrypick label: new pull request created to branch release-6.5: #44144.