Package: dbconfig-common
Version: 1.8.35
Severity: normal

I have the following scenario:
1.) You install package foo, which creates the db bar and the mysql user
baz. Password for baz is autogenerated.
2.) You purge the package foo. dbconfig-common (via debconf) prompts me,
if I want to deconfigure the db (default yes) and in the next step, if I
want to drop the db (default no).
So most users will probably accept the default.
3.) The users reinstalls the package foo. The db bar already exists,
same for the mysql user baz. The problem now is, that the now autogenerated
password does not match the password that is already in the mysql db.
The resulting config file written by dbconfig-common is not valid, as
the user baz can't access the bar db.

I would propose the following:
If in step 3) the user does not provide a password for the user bar,
dbconfig-common should update the password of the mysql user with the
newly autogenerated password iff bar has only access rights for db foo.

If the administrator has granted the bar user additional access right
for other dbs, the password shall not be updated as this would
potentially break existing setups.

Cheers,
Michael


-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (300, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.23-rc3
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages dbconfig-common depends on:
ii  debconf [debconf-2.0]         1.5.14     Debian configuration management sy
ii  ucf                           3.001      Update Configuration File: preserv

dbconfig-common recommends no packages.

-- debconf information:
  dbconfig-common/remote-questions-default: false
  dbconfig-common/pgsql/revertconf: false
  dbconfig-common/internal/skip-preseed: false
  dbconfig-common/db/dbname:
  dbconfig-common/pgsql/manualconf:
  dbconfig-common/dbconfig-remove: true
  dbconfig-common/mysql/method: unix socket
  dbconfig-common/upgrade-backup: true
  dbconfig-common/pgsql/authmethod-admin: ident
  dbconfig-common/upgrade-error: abort
  dbconfig-common/purge: false
  dbconfig-common/db/basepath:
  dbconfig-common/install-error: abort
  dbconfig-common/pgsql/no-empty-passwords:
  dbconfig-common/pgsql/admin-user: postgres
  dbconfig-common/dbconfig-install: true
  dbconfig-common/dbconfig-reinstall: false
  dbconfig-common/remote/host:
  dbconfig-common/pgsql/changeconf: false
  dbconfig-common/remote/newhost:
  dbconfig-common/missing-db-package-error: abort
  dbconfig-common/dbconfig-upgrade: true
  dbconfig-common/pgsql/no-user-choose-other-method:
  dbconfig-common/internal/reconfiguring: false
  dbconfig-common/passwords-do-not-match:
  dbconfig-common/remove-error: abort
  dbconfig-common/remember-admin-pass: false
  dbconfig-common/mysql/admin-user: root
  dbconfig-common/pgsql/method: unix socket
  dbconfig-common/pgsql/authmethod-user:
  dbconfig-common/database-type:
  dbconfig-common/db/app-user:
  dbconfig-common/remote/port:


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to