Re: [MediaWiki-l] Mediawiki with AWS RDS MariaDB (TLS Enabled)
In that case I unfortunately cannot help you further. Someone else will have to assist you. — Amanda On Monday, February 19, 2018, 4:26 PM, Vladimir Klevko wrote: This is not a problem as currently I do not care about 3rd parties much as far as the MW installation is running in private subnet of AWS VPC hidden with tones of security on top. I'm just trying to make MW connect to RDS instance and this is my problem that it doesn't. Running php maintenance/install.php with the options for database host, username and password executes successfully, however MW itself receives just "Access denied". So that's an issue, but not the security. Even if you remove all the SSL stuff in the below config the connection is still not there. Vladimir On Mon, Feb 19, 2018 at 9:16 PM, Amanda Quad wrote: > ...And that’s the problem. > You can connect using those default credentials, but they don’t actually > work for doing anything except connecting to the client. > You need to configure your own database username and password. Otherwise, > a third party could hack into your database and take over the site. > — Amanda > > > On Monday, February 19, 2018, 3:14 PM, Vladimir Klevko > wrote: > > Imagine that they're real as far as using absolutely the same credentials > I'm able to connect via the mysql client as I wrote below. > > I also tried the following scenario where I cleaned up database completely, > move LocalSettings.php to the backup and ran the installation script with > the same outcome, however the installation script ran without any issues. > > V. > > On Mon, Feb 19, 2018 at 4:48 PM, Amanda Quad wrote: > > > Well, for starters you need to replace the default placeholders of > > “wiki_db”, “wikiuser”, and “wikipassword” with the actual credentials > that > > you are using. > > — Amanda > > > > > > On Monday, February 19, 2018, 10:37 AM, Vladimir Klevko < > impu...@gmail.com> > > wrote: > > > > Hello, > > > > I'm struggling very hard to make the Mediawiki work together with the AWS > > RDS running MariaDB with SSL enabled. I've followed the guide on the > > website and ended up with the following configuration: > > > > ## Database settings > > $wgDBtype = "mysql"; > > > > $wgDBservers = array( > > array( > > 'host' => "", > > 'dbname' => "wiki_db", > > 'user' => "wikiuser", > > 'password' => "wikipassword", > > 'type' => "mysql", > > 'flags' => DBO_SSL, > > 'load' => 0, > > 'sslCAFile' => "/var/www/html/rds-combined-ca-bundle.pem" > > > > ), > > ); > > > > # MySQL specific settings > > $wgDBprefix = ""; > > > > # MySQL table options to use during installation or update > > $wgDBTableOptions = "ENGINE=InnoDB, DEFAULT CHARSET=binary"; > > > > > > # Experimental charset support for MySQL 5.0. > > $wgDBmysql5 = false; > > > > - > > > > https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/ > > CHAP_MariaDB.html#MariaDB.Concepts.SSLSupport > > > > However I'm always getting the Access Denied error while trying to > connect > > with the same credentials and certificate using native MySQL client works > > just fine > > > > Any help is highly appreciated. > > > > Many Thanks, > > Vladimir. > > ___ > > MediaWiki-l mailing list > > To unsubscribe, go to: > > https://lists.wikimedia.org/mailman/listinfo/mediawiki-l > > > > > > > > ___ > > MediaWiki-l mailing list > > To unsubscribe, go to: > > https://lists.wikimedia.org/mailman/listinfo/mediawiki-l > > > ___ > MediaWiki-l mailing list > To unsubscribe, go to: > https://lists.wikimedia.org/mailman/listinfo/mediawiki-l > > > > ___ > MediaWiki-l mailing list > To unsubscribe, go to: > https://lists.wikimedia.org/mailman/listinfo/mediawiki-l > ___ MediaWiki-l mailing list To unsubscribe, go to: https://lists.wikimedia.org/mailman/listinfo/mediawiki-l ___ MediaWiki-l mailing list To unsubscribe, go to: https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
Re: [MediaWiki-l] Mediawiki with AWS RDS MariaDB (TLS Enabled)
This is not a problem as currently I do not care about 3rd parties much as far as the MW installation is running in private subnet of AWS VPC hidden with tones of security on top. I'm just trying to make MW connect to RDS instance and this is my problem that it doesn't. Running php maintenance/install.php with the options for database host, username and password executes successfully, however MW itself receives just "Access denied". So that's an issue, but not the security. Even if you remove all the SSL stuff in the below config the connection is still not there. Vladimir On Mon, Feb 19, 2018 at 9:16 PM, Amanda Quad wrote: > ...And that’s the problem. > You can connect using those default credentials, but they don’t actually > work for doing anything except connecting to the client. > You need to configure your own database username and password. Otherwise, > a third party could hack into your database and take over the site. > — Amanda > > > On Monday, February 19, 2018, 3:14 PM, Vladimir Klevko > wrote: > > Imagine that they're real as far as using absolutely the same credentials > I'm able to connect via the mysql client as I wrote below. > > I also tried the following scenario where I cleaned up database completely, > move LocalSettings.php to the backup and ran the installation script with > the same outcome, however the installation script ran without any issues. > > V. > > On Mon, Feb 19, 2018 at 4:48 PM, Amanda Quad wrote: > > > Well, for starters you need to replace the default placeholders of > > “wiki_db”, “wikiuser”, and “wikipassword” with the actual credentials > that > > you are using. > > — Amanda > > > > > > On Monday, February 19, 2018, 10:37 AM, Vladimir Klevko < > impu...@gmail.com> > > wrote: > > > > Hello, > > > > I'm struggling very hard to make the Mediawiki work together with the AWS > > RDS running MariaDB with SSL enabled. I've followed the guide on the > > website and ended up with the following configuration: > > > > ## Database settings > > $wgDBtype = "mysql"; > > > > $wgDBservers = array( > >array( > >'host' => "", > >'dbname' => "wiki_db", > >'user' => "wikiuser", > >'password' => "wikipassword", > >'type' => "mysql", > >'flags' => DBO_SSL, > >'load' => 0, > >'sslCAFile' => "/var/www/html/rds-combined-ca-bundle.pem" > > > >), > > ); > > > > # MySQL specific settings > > $wgDBprefix = ""; > > > > # MySQL table options to use during installation or update > > $wgDBTableOptions = "ENGINE=InnoDB, DEFAULT CHARSET=binary"; > > > > > > # Experimental charset support for MySQL 5.0. > > $wgDBmysql5 = false; > > > > - > > > > https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/ > > CHAP_MariaDB.html#MariaDB.Concepts.SSLSupport > > > > However I'm always getting the Access Denied error while trying to > connect > > with the same credentials and certificate using native MySQL client works > > just fine > > > > Any help is highly appreciated. > > > > Many Thanks, > > Vladimir. > > ___ > > MediaWiki-l mailing list > > To unsubscribe, go to: > > https://lists.wikimedia.org/mailman/listinfo/mediawiki-l > > > > > > > > ___ > > MediaWiki-l mailing list > > To unsubscribe, go to: > > https://lists.wikimedia.org/mailman/listinfo/mediawiki-l > > > ___ > MediaWiki-l mailing list > To unsubscribe, go to: > https://lists.wikimedia.org/mailman/listinfo/mediawiki-l > > > > ___ > MediaWiki-l mailing list > To unsubscribe, go to: > https://lists.wikimedia.org/mailman/listinfo/mediawiki-l > ___ MediaWiki-l mailing list To unsubscribe, go to: https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
Re: [MediaWiki-l] Mediawiki with AWS RDS MariaDB (TLS Enabled)
...And that’s the problem. You can connect using those default credentials, but they don’t actually work for doing anything except connecting to the client. You need to configure your own database username and password. Otherwise, a third party could hack into your database and take over the site. — Amanda On Monday, February 19, 2018, 3:14 PM, Vladimir Klevko wrote: Imagine that they're real as far as using absolutely the same credentials I'm able to connect via the mysql client as I wrote below. I also tried the following scenario where I cleaned up database completely, move LocalSettings.php to the backup and ran the installation script with the same outcome, however the installation script ran without any issues. V. On Mon, Feb 19, 2018 at 4:48 PM, Amanda Quad wrote: > Well, for starters you need to replace the default placeholders of > “wiki_db”, “wikiuser”, and “wikipassword” with the actual credentials that > you are using. > — Amanda > > > On Monday, February 19, 2018, 10:37 AM, Vladimir Klevko > wrote: > > Hello, > > I'm struggling very hard to make the Mediawiki work together with the AWS > RDS running MariaDB with SSL enabled. I've followed the guide on the > website and ended up with the following configuration: > > ## Database settings > $wgDBtype = "mysql"; > > $wgDBservers = array( > array( > 'host' => "", > 'dbname' => "wiki_db", > 'user' => "wikiuser", > 'password' => "wikipassword", > 'type' => "mysql", > 'flags' => DBO_SSL, > 'load' => 0, > 'sslCAFile' => "/var/www/html/rds-combined-ca-bundle.pem" > > ), > ); > > # MySQL specific settings > $wgDBprefix = ""; > > # MySQL table options to use during installation or update > $wgDBTableOptions = "ENGINE=InnoDB, DEFAULT CHARSET=binary"; > > > # Experimental charset support for MySQL 5.0. > $wgDBmysql5 = false; > > - > > https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/ > CHAP_MariaDB.html#MariaDB.Concepts.SSLSupport > > However I'm always getting the Access Denied error while trying to connect > with the same credentials and certificate using native MySQL client works > just fine > > Any help is highly appreciated. > > Many Thanks, > Vladimir. > ___ > MediaWiki-l mailing list > To unsubscribe, go to: > https://lists.wikimedia.org/mailman/listinfo/mediawiki-l > > > > ___ > MediaWiki-l mailing list > To unsubscribe, go to: > https://lists.wikimedia.org/mailman/listinfo/mediawiki-l > ___ MediaWiki-l mailing list To unsubscribe, go to: https://lists.wikimedia.org/mailman/listinfo/mediawiki-l ___ MediaWiki-l mailing list To unsubscribe, go to: https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
Re: [MediaWiki-l] Mediawiki with AWS RDS MariaDB (TLS Enabled)
Imagine that they're real as far as using absolutely the same credentials I'm able to connect via the mysql client as I wrote below. I also tried the following scenario where I cleaned up database completely, move LocalSettings.php to the backup and ran the installation script with the same outcome, however the installation script ran without any issues. V. On Mon, Feb 19, 2018 at 4:48 PM, Amanda Quad wrote: > Well, for starters you need to replace the default placeholders of > “wiki_db”, “wikiuser”, and “wikipassword” with the actual credentials that > you are using. > — Amanda > > > On Monday, February 19, 2018, 10:37 AM, Vladimir Klevko > wrote: > > Hello, > > I'm struggling very hard to make the Mediawiki work together with the AWS > RDS running MariaDB with SSL enabled. I've followed the guide on the > website and ended up with the following configuration: > > ## Database settings > $wgDBtype = "mysql"; > > $wgDBservers = array( > array( > 'host' => "", > 'dbname' => "wiki_db", > 'user' => "wikiuser", > 'password' => "wikipassword", > 'type' => "mysql", > 'flags' => DBO_SSL, > 'load' => 0, > 'sslCAFile' => "/var/www/html/rds-combined-ca-bundle.pem" > > ), > ); > > # MySQL specific settings > $wgDBprefix = ""; > > # MySQL table options to use during installation or update > $wgDBTableOptions = "ENGINE=InnoDB, DEFAULT CHARSET=binary"; > > > # Experimental charset support for MySQL 5.0. > $wgDBmysql5 = false; > > - > > https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/ > CHAP_MariaDB.html#MariaDB.Concepts.SSLSupport > > However I'm always getting the Access Denied error while trying to connect > with the same credentials and certificate using native MySQL client works > just fine > > Any help is highly appreciated. > > Many Thanks, > Vladimir. > ___ > MediaWiki-l mailing list > To unsubscribe, go to: > https://lists.wikimedia.org/mailman/listinfo/mediawiki-l > > > > ___ > MediaWiki-l mailing list > To unsubscribe, go to: > https://lists.wikimedia.org/mailman/listinfo/mediawiki-l > ___ MediaWiki-l mailing list To unsubscribe, go to: https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
Re: [MediaWiki-l] Mediawiki with AWS RDS MariaDB (TLS Enabled)
Well, for starters you need to replace the default placeholders of “wiki_db”, “wikiuser”, and “wikipassword” with the actual credentials that you are using. — Amanda On Monday, February 19, 2018, 10:37 AM, Vladimir Klevko wrote: Hello, I'm struggling very hard to make the Mediawiki work together with the AWS RDS running MariaDB with SSL enabled. I've followed the guide on the website and ended up with the following configuration: ## Database settings $wgDBtype = "mysql"; $wgDBservers = array( array( 'host' => "", 'dbname' => "wiki_db", 'user' => "wikiuser", 'password' => "wikipassword", 'type' => "mysql", 'flags' => DBO_SSL, 'load' => 0, 'sslCAFile' => "/var/www/html/rds-combined-ca-bundle.pem" ), ); # MySQL specific settings $wgDBprefix = ""; # MySQL table options to use during installation or update $wgDBTableOptions = "ENGINE=InnoDB, DEFAULT CHARSET=binary"; # Experimental charset support for MySQL 5.0. $wgDBmysql5 = false; - https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_MariaDB.html#MariaDB.Concepts.SSLSupport However I'm always getting the Access Denied error while trying to connect with the same credentials and certificate using native MySQL client works just fine Any help is highly appreciated. Many Thanks, Vladimir. ___ MediaWiki-l mailing list To unsubscribe, go to: https://lists.wikimedia.org/mailman/listinfo/mediawiki-l ___ MediaWiki-l mailing list To unsubscribe, go to: https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
[MediaWiki-l] Mediawiki with AWS RDS MariaDB (TLS Enabled)
Hello, I'm struggling very hard to make the Mediawiki work together with the AWS RDS running MariaDB with SSL enabled. I've followed the guide on the website and ended up with the following configuration: ## Database settings $wgDBtype = "mysql"; $wgDBservers = array( array( 'host' => "", 'dbname' => "wiki_db", 'user' => "wikiuser", 'password' => "wikipassword", 'type' => "mysql", 'flags' => DBO_SSL, 'load' => 0, 'sslCAFile' => "/var/www/html/rds-combined-ca-bundle.pem" ), ); # MySQL specific settings $wgDBprefix = ""; # MySQL table options to use during installation or update $wgDBTableOptions = "ENGINE=InnoDB, DEFAULT CHARSET=binary"; # Experimental charset support for MySQL 5.0. $wgDBmysql5 = false; - https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_MariaDB.html#MariaDB.Concepts.SSLSupport However I'm always getting the Access Denied error while trying to connect with the same credentials and certificate using native MySQL client works just fine Any help is highly appreciated. Many Thanks, Vladimir. ___ MediaWiki-l mailing list To unsubscribe, go to: https://lists.wikimedia.org/mailman/listinfo/mediawiki-l