server,cli,sql: enable setting a password for the root user #6586
Description
PR: cockroachdb/cockroach#43893
From release notes:
The
rootuser can now have a password, like any other member of the admin role. However, as in previous versions, the HBA configuration cannot be overridden to preventrootfrom logging in with a valid TLS client certificate. This special rule remains enforced in order to ensure that users cannot "lock themselves out" of administrating their cluster. [#43893][#43893] {% comment %}doc{% endcomment %}
Therootuser remains special with regard to authentication when some system ranges are unavailable. In that case, password authentication will fail, subject to a timeout set to the minimum of 5 seconds and the configured value ofsystem.user_login.timeout, because the password cannot be retrieved from a system table. However, certificate authentication remains available. [#43893][#43893] {% comment %}doc{% endcomment %}