Your message dated Wed, 9 Oct 2019 19:56:12 +0200
with message-id <[email protected]>
and subject line Re: [munin-node] munin-node mysql configuration (mariadb)
has caused the Debian Bug report #934772,
regarding [munin-node] munin-node mysql configuration (mariadb)
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
934772: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=934772
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: munin-node
Version: 2.0.49-1
Severity: normal
Tags: patch
--- Please enter the report below this line. ---
Dear maintainer, I recently upgraded to Buster, all was working fine or at
least that was thinking, on all our production machines have found an
unusual amount of warnings on /var/log/syslog:
Access denied for user 'root'@'localhost' (using password: YES)
Searching the origin of this messagesi, finded that munin was the
culprit, so searching for similar errors found bug #864845 when the solution was
to change:
-env.mysqluser debian-sys-maint
+env.mysqluser root
And looks like the default configuration for munin-node now is that one,
the oposite has worked for me, returning to debian-sys-maint to handle
the request of munin, my machines are running mariadb-server
(10.3.15-1) with mysql_secure_installation, password set for root and no test
db.
My current fix is:
diff -u /home/vicm3/1/etc/munin/plugin-conf.d/munin-node
/etc/munin/plugin-conf.d/munin-node
--- /home/vicm3/1/etc/munin/plugin-conf.d/munin-node 2019-05-15
18:21:08.000000000 -0500
+++ /etc/munin/plugin-conf.d/munin-node 2019-08-14 11:27:37.234767719 -0500
@@ -73,7 +73,7 @@
[mysql*]
user root
env.mysqlopts --defaults-file=/etc/mysql/debian.cnf
-env.mysqluser root
+env.mysqluser debian-sys-maint
env.mysqlconnection
DBI:mysql:mysql;mysql_read_default_file=/etc/mysql/debian.cnf
[postfix_mailqueue]
Please check and if it's useful commit.
Best regards.
Mariadb info:
ii libmariadb3:amd64 1:10.3.15-1
amd64 MariaDB database client library
ii mariadb-client-10.3 1:10.3.15-1
amd64 MariaDB database client binaries
ii mariadb-client-core-10.3 1:10.3.15-1
amd64 MariaDB database core client binaries
ii mariadb-common 1:10.3.15-1
all MariaDB common metapackage
ii mariadb-server 1:10.3.15-1
all MariaDB database server (metapackage depending on the latest
version)
ii mariadb-server-10.3 1:10.3.15-1
amd64 MariaDB database server binaries
ii mariadb-server-core-10.3 1:10.3.15-1
amd64 MariaDB database core server files
--- System information. ---
Architecture:
Kernel: Linux 4.19.0-5-amd64
Debian Release: 10.0
500 stable security.debian.org
500 stable ftp.us.debian.org
--- Package information. ---
Depends (Version) | Installed
====================================-+-==============
perl | 5.28.1-6
libnet-server-perl | 2.009-1
lsb-base (>= 4.1) | 10.2019051400
munin-common (>= 2.0.49-1) | 2.0.49-1
munin-plugins-core | 2.0.49-1
netbase | 5.6
Recommends (Version) | Installed
==================================-+-===========
gawk | 1:4.2.1+dfsg-1
munin-plugins-extra | 2.0.49-1
procps | 2:3.3.15-2
Suggests (Version) | Installed
=================================-+-===========
munin |
munin-plugins-java |
--- End Message ---
--- Begin Message ---
Hello,
On Wed, 14 Aug 2019 12:00:18 -0500 =?iso-8859-1?Q?V=EDctor_Mart=EDnez?=
<[email protected]> wrote:
> Access denied for user 'root'@'localhost' (using password: YES)
indeed, this is a side-effect of the changed mysql/mariadb configuration.
It is documented in the munin-node package's NEW file:
munin-node (2.0.42-1) unstable; urgency=low
The mysql_* plugins no longer use the "debian-sys-maint" account for
accessing the mysql database, but use "root" instead. This is based
on authentication via unix socket (introduced in mariadb v10.0).
You may need to override the munin plugin configuration for "mysql_*"
(e.g. in /etc/munin/plugin-conf.d/foo) if your mariadb server was
upgraded from a mysql server package and thus does not support unix
socket based authentication. This situation can be tested by running
"mysql -u root" without providing a password. No action is required,
if this works for you.
-- Lars Kruse <[email protected]> Sun, 05 Aug 2018 03:03:58 +0200
Maybe you see another place (or a better wording), that would make this
transition less troublesome for users?
Closing the bug for now, as this is the expected behaviour.
Cheers,
Lars
--- End Message ---
