Bug#316127: mysql-server-4.1: Please generate random default password for root

2005-10-28 Thread Olaf van der Spek
> "random-password" makes too much trouble for the reasons Olaf and you already pointed out (mail is insecure, displayed passwords will be overlooked..) I think writing the password to /etc/mysql/root_password (600) and emailing and/or showing a (debconf) notice saying the password is stored there

Bug#316127: mysql-server-4.1: Please generate random default password for root

2005-08-07 Thread Olaf van der Spek
sean finney wrote: tags 316127 patch thanks hey christian, olaf, attached is a diff against the sid-5.0 trunk that i think should do what i discussed. unfortunately i don't have the time to verify it (i don't have a copy of the latest dfsg tarball), but it's a fairly small patch and the code i

Bug#316127: mysql-server-4.1: Please generate random default password for root

2005-08-06 Thread sean finney
tags 316127 patch thanks hey christian, olaf, attached is a diff against the sid-5.0 trunk that i think should do what i discussed. unfortunately i don't have the time to verify it (i don't have a copy of the latest dfsg tarball), but it's a fairly small patch and the code is not that complicate

Bug#316127: mysql-server-4.1: Please generate random default password for root

2005-07-06 Thread Olaf van der Spek
Christian Hammers wrote: "random-password" makes too much trouble for the reasons Olaf and you already pointed out (mail is insecure, displayed passwords will be overlooked..) I asked at debian-devel and: Chrony puts it in a file in /etc/chrony. And protects it from being read by unauthorized p

Bug#316127: mysql-server-4.1: Please generate random default password for root

2005-07-05 Thread Christian Hammers
Hello On 2005-06-28 Olaf van der Spek wrote: > sean finney wrote: > > also, now that i think about it, we could put something in the postinst > > that checks if it could connect to the mysql server w/o a password after > > starting the server, and if so prompts the admin whether with an > > ignore

Bug#316127: mysql-server-4.1: Please generate random default password for root

2005-06-29 Thread sean finney
On Wed, Jun 29, 2005 at 12:24:18AM +0200, Christian Hammers wrote: > > Is that a good reason to run without root pass? > > It's good enough not to change the password without asking the admin and > not displaying it on every upgrade if the admin likes to stay with his > decision. so this is what

Bug#316127: mysql-server-4.1: Please generate random default password for root

2005-06-29 Thread Olaf van der Spek
Christian Hammers wrote: This warning should probably also only displayed once (as it's Debconf default) to not annoy the admins that do not want a password on their database (my desktop has mysql installed to quickly try out things when I'm doing work on another machine e.g.) Is that a good r

Bug#316127: mysql-server-4.1: Please generate random default password for root

2005-06-28 Thread Christian Hammers
Hello On 2005-06-28 Olaf van der Spek wrote: > Christian Hammers wrote: > > Maybe just a warning note? Actually setting the password should be nothing > > we should clutter up our scripts with (they are grown too big anyway IMHO) > > as that's really something the local admin is in charge of. > >

Bug#316127: mysql-server-4.1: Please generate random default password for root

2005-06-28 Thread Christian Hammers
Hello On 2005-06-28 sean finney wrote: > On Tue, Jun 28, 2005 at 10:07:05PM +0200, Olaf van der Spek wrote: > > >or better, what if we prompt for the root password via debconf, and then > > >if the answer is non-blank, set the password? this wouldn't be very > > >hard to do. > > > > The disadvan

Bug#316127: mysql-server-4.1: Please generate random default password for root

2005-06-28 Thread Olaf van der Spek
Christian Hammers wrote: Maybe just a warning note? Actually setting the password should be nothing we should clutter up our scripts with (they are grown too big anyway IMHO) as that's really something the local admin is in charge of. Isn't the local admin in charge of everything? This warning

Bug#316127: mysql-server-4.1: Please generate random default password for root

2005-06-28 Thread Olaf van der Spek
sean finney wrote: hey, On Tue, Jun 28, 2005 at 10:07:05PM +0200, Olaf van der Spek wrote: or better, what if we prompt for the root password via debconf, and then if the answer is non-blank, set the password? this wouldn't be very hard to do. The disadvantage would be another question. As

Bug#316127: mysql-server-4.1: Please generate random default password for root

2005-06-28 Thread sean finney
hey, On Tue, Jun 28, 2005 at 10:07:05PM +0200, Olaf van der Spek wrote: > >or better, what if we prompt for the root password via debconf, and then > >if the answer is non-blank, set the password? this wouldn't be very > >hard to do. > > The disadvantage would be another question. > As I prefer

Bug#316127: mysql-server-4.1: Please generate random default password for root

2005-06-28 Thread Olaf van der Spek
sean finney wrote: hey olaf, On Tue, Jun 28, 2005 at 07:34:35PM +0200, Olaf van der Spek wrote: Would it be possible to generate a random default password for the MySQL root user instead of the blank password? The password could be stored in a file in /root for example. or better, what if

Bug#316127: mysql-server-4.1: Please generate random default password for root

2005-06-28 Thread sean finney
hey olaf, On Tue, Jun 28, 2005 at 07:34:35PM +0200, Olaf van der Spek wrote: > Would it be possible to generate a random default password for the MySQL root > user instead of the blank password? > The password could be stored in a file in /root for example. or better, what if we prompt for the r

Bug#316127: mysql-server-4.1: Please generate random default password for root

2005-06-28 Thread Olaf van der Spek
Package: mysql-server-4.1 Version: 4.1.12-1 Severity: wishlist Hi, Would it be possible to generate a random default password for the MySQL root user instead of the blank password? The password could be stored in a file in /root for example. -- System Information: Debian Release: testing/unstab