- discuss - lists.mariadb.org

[Maria-discuss] OpenLDAP & PAM authentication
by Adam Balgach 19 Jan '18

19 Jan '18

Hello – I am having an issue configuring openLDAP to authenticate users on an instance in RHEL (CentOS 7) MariaDB server configured with plugin-load=auth_pam.so in my /etc/pam.d/mysql: auth required pam_ldap.so account required pam_ldap.so when I try and access the server from either the localhost, or any server inside my internal network, I see the LDAP authentication happen without issue and login is fine. When I try and access the server from outside the network, on the mariadb server in /var/log/secure I see the following: Jan 19 08:32:35 mysqld: pam_ldap(mysql:auth): unexpected response from failed conversation function Jan 19 08:32:35 mysqld: pam_ldap(mysql:auth): conversation failed Jan 19 08:32:35 mysqld: pam_ldap(mysql:auth): failed to get password: Authentication token manipulation error And in my client (Cygwin) I get the following error: ERROR 2059 (HY000): Authentication plugin 'mysql_clear_password' cannot be loaded: No such file or directory However I see this plugin in the /usr/lib64/mysql/plugin directory Any idea what is going wrong with remote logins? Thanks-

2 1

[Maria-discuss] MariaDB 10.3.4 installation blocked ny MS "Windows Defender" malware protection
by Peter Laursen 19 Jan '18

19 Jan '18

Please see image. (you can clik "more info" adn the option to "install anyway" will appear. Did you forget to sign the installer this time or has some certificate expired? -- Peter -- Webog

2 5

Re: [Maria-discuss] Parallel Databases and network security
by Reindl Harald 16 Jan '18

16 Jan '18

Am 16.01.2018 um 05:10 schrieb Jan Steinman: >> On 2018-01-15, at 17:15, Reindl Harald <h.reindl(a)thelounge.net> wrote: >> >> Am 16.01.2018 um 01:58 schrieb Jan Steinman: >>>> On 2018-01-15, at 16:37, Ruben Safir <ruben(a)mrbrklyn.com> wrote: >>>> >>>> Because that is how I want it. The longer explanation is, because that >>>> is how I want to do it, period. >>> You have the freedom to be foolish. And I have the freedom to not help you be foolish >> >> forget it - that fool obviously never wants answers to his questions nor tries to understand what people tell him > > He doesn’t understand how TCP/IP and routed works, either: “I'd like it to only listen on a specific interface altogether.” > > That’s okay. It’s been cheap entertainment for me! :-) :-) however, it's heartwarming that someone who don't want anserws from humans types his questions not in a search engine like https://www.google.at/search?q=mysql+listen gicen that the first hit is not too bad... https://www.howtogeek.com/howto/mysql/switch-mysql-to-listen-on-tcp/

3 8

[Maria-discuss] Parallel Databases and network security
by Ruben Safir 16 Jan '18

16 Jan '18

Is there a way to hot copy a database from one machine to another and restrict network access to only between those two machines without using a firewall? Ruben -- So many immigrant groups have swept through our town that Brooklyn, like Atlantis, reaches mythological proportions in the mind of the world - RI Safir 1998 http://www.mrbrklyn.com DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 http://www.nylxs.com - Leadership Development in Free Software http://www2.mrbrklyn.com/resources - Unpublished Archive http://www.coinhangout.com - coins! http://www.brooklyn-living.com Being so tracked is for FARM ANIMALS and and extermination camps, but incompatible with living as a free human being. -RI Safir 2013

3 6

Re: [Maria-discuss] Parallel Databases and network security
by Reindl Harald 16 Jan '18

16 Jan '18

Am 16.01.2018 um 01:58 schrieb Jan Steinman: >> On 2018-01-15, at 16:37, Ruben Safir <ruben(a)mrbrklyn.com> wrote: >> >> Because that is how I want it. The longer explanation is, because that >> is how I want to do it, period. > > You have the freedom to be foolish. And I have the freedom to not help you be foolish forget it - that fool obviously never wants answers to his questions nor tries to understand what people tell him - leaves the questions why someone is aksing at all isntead just RTFM in silent in the thread below i did not say anything about that he should use systemd but how systemd does create the folder and why it should go to a subfolder and why that subfolder needs to created at every boot before try to start mysqld and his best answer was "I've seen already far too many security breakins of systemd" which i call a uneducated lie based on FUD https://www.mail-archive.com/maria-discuss@lists.launchpad.net/msg04760.html

1 0

[Maria-discuss] Submitting talks for Percona Live Santa Clara?
by Colin Charles 09 Jan '18

09 Jan '18

Hi all, As part of the program committee, I’m writing in to say we’ve seen only a handful of talks mention MariaDB Server out of the several hundred submissions so far. With all the amazing use cases of MariaDB Server out there, I would expect a lot more. The CFP ends January 12 2018, so please feel free to get ideas and submissions in: https://www.percona.com/live/18/ Kind Regards, Colin Charles -- Colin Charles, http://bytebot.net/blog/ twitter: @bytebot | skype: colincharles "First they ignore you, then they laugh at you, then they fight you, then you win." -- Mohandas Gandhi

3 2

[Maria-discuss] Problem with bit operations in certain expressions
by Mats Eklund 09 Jan '18

09 Jan '18

Hi, Need some help here. I have the following expression: SELECT IF(1=1, 0x2, 0x4) | 0x1 which in MySQL evaluates to: 3 but in MariaDB it evaluates to: 1 MySQL's result seems correct to me. Would appreciate any advice on this. Many thanks! Mats

3 2

[Maria-discuss] mariadb-connector-c mariadb_config: Faulty output with static gssapi plugin
by Stefan Scherfke 08 Jan '18

08 Jan '18

Hi all, the output of "mariadb_config --libs[_r]" is faulty if the AUTH_GSSAPI plugin is configured as static: I built mariadb-connector-c 3.0.2 on Fedora 26 with this command: mkdir build cd build cmake -DAUTH_GSSAPI=STATIC .. make The output of "mariadb_config" then looks like this: $ mariadb_config/mariadb_config --libs_r -L/usr/local/lib/mariadb/ -lmariadb -lpthread -ldl -lm -lssl -lcrypto -l-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err All libs should be named like "-l<name>" but gssapi_krb5 has a double "-l-l" prefix. This problems becomes more apparent when I build mariadb-connector-c as a Python Conda package. Without the "AUTH_GSSAPI=STATIC" flag, I get the following libs: -L/opt/emsconda/conda-bld/mariadb-connector-c/env/lib/ -lmariadb -lpthread -ldl -lm -lssl -lcrypto With the "AUTH_GSSAPI=STATIC" flag, I get the following libs: -L/opt/emsconda/conda-bld/mariadb-connector-c/env/lib/ -lmariadb -lpthread -ldl -lm -lssl -lcrypto -l-L/opt/emsconda/conda-bld/mariadb-connector-c/envplaceho/lib -Wl,--enable-new-dtags -Wl,-rpath -Wl,/opt/emsconda/conda-bld/mariadb-connector-c/envplaceho/lib -lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err The problematic part there is the "-l-L/opt/emsconda/.../lib" part which confuses other tools like Mydumper when they are compiled against mariadb-connector-c. Is this an issue with mariadb-connector-c or can I fix it in my build process somehow? Cheers, Stefan

2 2

[Maria-discuss] Fwd: [MariaDB Announce] MariaDB 10.2.12 now available
by Reindl Harald 04 Jan '18

04 Jan '18

and once again a update don't build with the same rpm-spec as before - frankly how often should i offer that someone sends out a mail to the ML with a link to a proposed release tarball to get such things fixed *before* release? + cmake . -DFEATURE_SET=large -DCMAKE_INSTALL_PREFIX=/usr -DINSTALL_INCLUDEDIR=include/mysql -DINSTALL_LAYOUT=RPM -DDAEMON_NAME=mysqld -DDAEMON_NO_PREFIX=mysqld -DNICE_PROJECT_NAME=MariaDB -DINSTALL_LIBDIR=lib64/mysql -DINSTALL_MANDIR=share/man -DINSTALL_MYSQLSHAREDIR=share/mysql -DINSTALL_MYSQLTESTDIR=share/mysql-test -DINSTALL_PLUGINDIR=lib64/mysql/plugin -DINSTALL_SBINDIR=libexec -DINSTALL_SCRIPTDIR=bin -DINSTALL_SQLBENCHDIR= -DINSTALL_SUPPORTFILESDIR=share/mysql -DMYSQL_DATADIR=/var/lib/mysql -DMYSQL_UNIX_ADDR=/var/lib/mysql/mysql.sock -DENABLED_PROFILING=OFF -DENABLE_DEBUG_SYNC=OFF -DENABLE_DTRACE=OFF -DPLUGIN_ARIA=YES -DPLUGIN_CSV=YES -DPLUGIN_MYISAM=YES -DPLUGIN_ARCHIVE=NO -DPLUGIN_BLACKHOLE=NO -DPLUGIN_CASSANDRA=NO -DPLUGIN_CONNECT=NO -DPLUGIN_EXAMPLE=NO -DPLUGIN_FEDERATED=NO -DPLUGIN_FEDERATEDX=NO -DPLUGIN_FEEDBACK=NO -DPLUGIN_MROONGA=NO -DPLUGIN_MYISAMMRG=NO -DPLUGIN_OQGRAPH=NO -DPLUGIN_PARTITION=NO -DPLUGIN_PERFSCHEMA=NO -DPLUGIN_ROCKSDB=NO -DPLUGIN_SEMISYNC=NO -DPLUGIN_SEQUENCE=NO -DPLUGIN_SPHINX=NO -DPLUGIN_SPIDER=NO -DPLUGIN_TOKUDB=NO -DPLUGIN_XTRADB=NO -DWITHOUT_DYNAMIC_PLUGINS=ON -DWITH_ATOMIC_OPS=smp -DWITH_EMBEDDED_SERVER=OFF -DWITH_INNODB_DISALLOW_WRITES=OFF -DWITH_INNODB_BZIP2=OFF -DWITH_INNODB_LZ4=OFF -DWITH_INNODB_LZMA=OFF -DWITH_INNODB_LZO=OFF -DWITH_INNODB_SNAPPY=OFF -DWITH_MYSQLCOMPAT=ON -DSECURITY_HARDENED=OFF -DWITH_LIBARCHIVE=OFF -DWITH_LIBWRAP=OFF -DWITH_MARIABACKUP=OFF -DWITH_PIC=NO -DWITH_READLINE=OFF -DWITH_SAFEMALLOC=OFF -DWITH_VALGRIND=OFF -DWITH_WSREP=OFF -DWITH_JEMALLOC=OFF -DWITH_SSL=system -DWITH_ZLIB=system -DCOMPILATION_COMMENT=thelounge [ 99%] Built target sql Scanning dependencies of target explain_filename-t Scanning dependencies of target mysqld [ 99%] Building CXX object sql/CMakeFiles/mysqld.dir/main.cc.o [100%] Linking CXX executable mysqld [100%] Building CXX object unittest/sql/CMakeFiles/explain_filename-t.dir/explain_filename-t.cc.o [100%] Linking CXX executable explain_filename-t libsql.a(sql_yacc.cc.o): In function .`MYSQLparse.(/THD.*.)/'sql:/ libsql.a/(homesql_yacc.cc.o/)buildbot:/ Ingit /functionsql /`sql_yacc.yyMYSQLparse(:THD*5211):' :undefined /referencehome /tobuildbot /`gitpartition_info/sql:/:sql_yacc.yyerror_if_requires_values:5211(: )undefined referenceconst 'to `partition_info::error_if_requires_values() const' collect2: error: ld returned 1 exit status collect2: error: ld returned 1 exit status make[2]: *** [sql/CMakeFiles/mysqld.dir/build.make:115: sql/mysqld] Error 1 make[2]: *** [unittest/sql/CMakeFiles/explain_filename-t.dir/build.make:116: unittest/sql/explain_filename-t] Error 1 make[1]: *** [CMakeFiles/Makefile2:8464: sql/CMakeFiles/mysqld.dir/all] Error 2 make[1]: *** Waiting for unfinished jobs.... make[1]: *** [CMakeFiles/Makefile2:1336: unittest/sql/CMakeFiles/explain_filename-t.dir/all] Error 2 -------- Weitergeleitete Nachricht -------- Betreff: [MariaDB Announce] MariaDB 10.2.12 now available Datum: Thu, 4 Jan 2018 19:20:40 +0200 Von: MariaDB Announce List <announce(a)mariadb.org> An: announce(a)mariadb.org The MariaDB project is pleased to announce the availability of MariaDB 10.2.12, the latest stable release in the MariaDB 10.2 series. See the Release Notes and Changelogs for details. - - Links - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - MariaDB 10.2.12 - Release Notes: https://mariadb.com/kb/en/mdb-10212-rn/ - Changelog: https://mariadb.com/kb/en/mdb-10212-cl/ - Downloads: https://downloads.mariadb.org/mariadb/10.2.12 About MariaDB 10.2: - https://mariadb.com/kb/en/what-is-mariadb-102/ APT and YUM Repository Configuration Generator: - https://downloads.mariadb.org/mariadb/repositories/ - - MariaDB Books - - - - - - - - - - - - - - - - - - - - - - - - - - There is an ever-growing library of MariaDB books available to help you get the most out of MariaDB. See the MariaDB Books page for details and links: - https://mariadb.com/kb/en/mariadb/books/ - - User Feedback plugin - - - - - - - - - - - - - - - - - - - - - - - MariaDB includes a User Feedback plugin. This plugin is disabled by default. If enabled, it submits basic, completely anonymous MariaDB usage information. This information is used by the developers to track trends in MariaDB usage to better guide development efforts. If you would like to help make MariaDB better, please add "feedback=ON" to your my.cnf or my.ini file! See http://mariadb.com/kb/en/user-feedback-plugin for more information. - - Quality - - - - - - - - - - - - - - - - - - - - - - - - - - - - - The project always strives for quality, but in reality, nothing is perfect. Please take time to report any issues you encounter at: - http://jira.mariadb.org - - Support MariaDB - - - - - - - - - - - - - - - - - - - - - - - - - If you would like to contribute to the MariaDB Foundation, please see the "contributing" and "donations" pages. We also have merchandise available in a cafepress store. All proceeds go to support the MariaDB Foundation. - https://mariadb.com/kb/en/contributing - https://mariadb.org/donate/ We hope you enjoy MariaDB! -- MariaDB Website - http://mariadb.org Twitter - http://twitter.com/mariadbfdn Knowledge Base - http://mariadb.com/kb

1 0

[Maria-discuss] Is this normal behaviour?
by Karthick Subramanian 04 Jan '18

04 Jan '18

All, When I tried to connect in centos 7 mariadb 10.2.11 server using root user, by mistake I gave wrong user name, but it connected successfully. I am not sure why. When I check show databases, it didnt list all DBs, but when I connect with root again, I can see all valid Dbs. Is this normal that even if I give wrong user, it authenticate into DB server from root. [root@ipaddr ~]# mysql -u rot Welcome to the MariaDB monitor. Commands end with ; or \g. Your MariaDB connection id is 22 Server version: 10.2.11-MariaDB MariaDB Server Copyright (c) 2000, 2017, Oracle, MariaDB Corporation Ab and others. Type 'help;' or '\h' for help. Type '\c' to clear the current input statement. MariaDB [(none)]> show databases; +--------------------+ | Database | +--------------------+ | information_schema | | test | +--------------------+ 2 rows in set (0.00 sec) MariaDB [(none)]> exit Bye [root@ipaddr~]# mysql -u root Welcome to the MariaDB monitor. Commands end with ; or \g. Your MariaDB connection id is 24 Server version: 10.2.11-MariaDB MariaDB Server Copyright (c) 2000, 2017, Oracle, MariaDB Corporation Ab and others. Type 'help;' or '\h' for help. Type '\c' to clear the current input statement. MariaDB [(none)]> show databases; +--------------------+ | Database | +--------------------+ | mydb01 | | information_schema | | mydb02 | | mysql | | performance_schema | | test | +--------------------+ 6 rows in set (0.00 sec)

4 4