https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41353
Bug ID: 41353
Summary: koha-dump failing on mysqldump PROCESS privileges
Initiative type: ---
Sponsorship ---
status:
Product: Koha
Version: 25.05
Hardware: All
OS: Linux
Status: NEW
Severity: major
Priority: P5 - low
Component: Command-line Utilities
Assignee: [email protected]
Reporter: [email protected]
QA Contact: [email protected]
CC: [email protected]
Created attachment 190076
-->
https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=190076&action=edit
Patch koha-dump to fix mysqldump privs error
Hi,
I've found this repeating error message(s) from cron:
/etc/cron.daily/koha-common:
mysqldump: [Warning] Using a password on the command line interface can be
insecure.
mysqldump: Error: 'Access denied; you need (at least one of) the PROCESS
privilege(s) for this operation' when trying to dump tablespaces
tar: var/log/koha/lib/opac-access.log: file changed as we read it
There is already a report open about the mysql cli password warning. I am not
addressing it here. I am not concerned by the tar warning neither.
The issue is with the:
mysqldump: Error: 'Access denied; you need (at least one of) the PROCESS
privilege(s) for this operation' when trying to dump tablespaces
I traced it back to koha-dump which is configured to be run in cron.daily. This
means these 'automatic' backups are not working on my system, and most likely
on other debian or even linux based deployments. Hopefully, I have my own
backups for the whole MySQL server covering this corner.
As there are other DBs on this MySQL server that hosting Koha too, I do not
want to give the koha SQL user (created by koha installation scripts) PROCESS
privileges for obvious security reasons.
The other alternative I found to fix this issue, and therefore the koha-dump
backup, is just to add --no-tablespaces to the mysqldump flags in the koha-dump
script.
As Koha does not seem to use transportable tablespaces, nor any low-level .ibd
file operations! Its backups are logical backups (SQL text). So I figure
patching this for every one makes sense.
The one liner patch is attached to this bug report.
Best regards,
--
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list
[email protected]
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/
