Bug#677844: [Pkg-nagios-devel] Bug#677844: icinga-web: postinst fails to set root passwd - MYSQL_PWD env var not working

2012-06-19 Thread Markus Frosch 
tags 677844 - unreproducible moreinfo
tags 677844 + fixed pending
thanks

Hello Tom,
 Following your reply, I did some more testing and the cause is
 definitely my .my.cnf.
 I can reproduce the error when install as my user (who has a .my.cnf) with 
 sudo.
 The issue does not occur when .my.cnf is removed.

Thanks, I've fixed that by using an empty defaults file so any 
/root/.my.cnf will be ignored.

The bug will be fixed in the next upload of 1.7.1-1 to unstable.

 I had a look at
 http://dev.mysql.com/doc/refman/5.5/en/password-security-user.html and
 even though using the -p parameter is not advised, the use of
 MYSQL_PWD is not recommended either.

Yes, thats right. The problem is that /proc/processid/environ might 
be readable to other users.

But I don't think this will be a problem here, because on linux only 
the process owner can read such a file - and root of course.

Please let me know if you have any additions.

Best Regards
Markus Frosch

--
Markus Frosch
mar...@lazyfrosch.de
http://www.lazyfrosch.de



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#677844: [Pkg-nagios-devel] Bug#677844: icinga-web: postinst fails to set root passwd - MYSQL_PWD env var not working

2012-06-18 Thread tomdeb 
Hello Markus,

Thanks for your quick reply.

Here is the output of the postinst script:
==
Creating config file /etc/icinga-web/conf.d/database-ido.xml with new version
database config successful: /etc/icinga-web/conf.d/database-ido.xml
ERROR 1045 (28000): Access denied for user 'icinga_web'@'localhost'
(using password: YES)
dpkg: error processing icinga-web (--configure):
 subprocess installed post-installation script returned error exit status 1
Errors were encountered while processing:
 icinga-web
E: Sub-process /usr/bin/dpkg returned an error code (1)
==

Following your reply, I did some more testing and the cause is
definitely my .my.cnf.
I can reproduce the error when install as my user (who has a .my.cnf) with sudo.
The issue does not occur when .my.cnf is removed.

I had a look at
http://dev.mysql.com/doc/refman/5.5/en/password-security-user.html and
even though using the -p parameter is not advised, the use of
MYSQL_PWD is not recommended either.

Regards,

Thomas Debost

On 17 June 2012 13:09, Markus Frosch mar...@lazyfrosch.de wrote:
 tags 677844 unreproducible moreinfo
 thanks

 Hello Tom,
 thanks for your report.

 The password previously stored in $MYSQL_PWD is not working.


 I'm afraid I can't confirm the problem with my sid VM, MySQL is the same
 version as yours.

 Is it possible to share the output of the postinst script, what exactly is
 the error?

 Do you have any mysql connection info defined via .my.cnf or the global
 my.cnf?

 Are there any special chars in your password that might cause the problem?

        echo UPDATE nsm_user SET user_password='$pwhash_e', user_salt
 = '$salt_e' WHERE user_name = 'root'; \
                     | mysql -h ${dbc_dbhost:=localhost} -u $dbc_dbuser
 -p$dbc_dbpass $dbc_dbname


 I'd not like to use this due to the root password will be visible via ps or
 the /proc filesystem...

 Please
 see http://dev.mysql.com/doc/refman/5.5/en/password-security-user.html

 Best Regards
 Markus Frosch

 --
 Markus Frosch
 mar...@lazyfrosch.de
 http://www.lazyfrosch.de



--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#677844: [Pkg-nagios-devel] Bug#677844: icinga-web: postinst fails to set root passwd - MYSQL_PWD env var not working

2012-06-17 Thread Markus Frosch 
tags 677844 unreproducible moreinfo
thanks

Hello Tom,
thanks for your report.

The password previously stored in $MYSQL_PWD is not working.


I'm afraid I can't confirm the problem with my sid VM, MySQL is the same
version as yours.

Is it possible to share the output of the postinst script, what exactly is
the error?

Do you have any mysql connection info defined via .my.cnf or the global
my.cnf?

Are there any special chars in your password that might cause the problem?

   echo UPDATE nsm_user SET user_password='$pwhash_e', user_salt =
 '$salt_e' WHERE user_name = 'root'; \
 | mysql -h ${dbc_dbhost:=localhost} -u $dbc_dbuser
 -p$dbc_dbpass $dbc_dbname


I'd not like to use this due to the root password will be visible via ps or
the /proc filesystem...

Please see
http://dev.mysql.com/doc/refman/5.5/en/password-security-user.html

Best Regards
Markus Frosch

-- 
Markus Frosch
mar...@lazyfrosch.de
http://www.lazyfrosch.de