Package: dbconfig-common
Version: 1.8.11
Severity: important

I was trying to debug a problem i had with simba and ended up looking at
this code:

----
                ###
                ### perform a few sanity checks on the data
                ###

                # if dbserver is unset, that means localhost.
                if [ -z "$dbc_dbserver" ]; then
                        # if the server is local, only allow connections from 
localhost
                        dbc_dballow="localhost"
                else
                        # otherwise, only tell the remote database to allow 
from us
                        dbc_dballow=`hostname`
                fi
----

I see two bugs here. 

The first one, and the one i am getting: if i tell dbserver to use "localhost"
dbc_dballow gets set to my hostname ("stark"). "Stark" hostname resolves to my 
real ip address, 
on which, by default, mysql does not listen to.

The second bug: if i would actually write the data to a remote server, that 
machine may or may not
be in the same domain name as me (search field in /etc/resolv.conf), so it 
should be "hostname -f", or even 
better an ip address.

This is how i think the code should look like:

----
                ###
                ### perform a few sanity checks on the data
                ###

                # if dbserver is unset, that means localhost.
                if [ -z "$dbc_dbserver" ] || [ "$dbc_dbserver" = "localhost" ]; 
then
                        # if the server is local, only allow connections from 
localhost
                        dbc_dballow="localhost"
                else
                        # otherwise, only tell the remote database to allow 
from us
                        dbc_dballow=`hostname -f`
                fi
----


-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.15-1-k7
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

Versions of packages dbconfig-common depends on:
ii  debconf [debconf-2.0]         1.4.72     Debian configuration management sy
ii  pwgen                         2.05-1     Automatic Password generation
ii  ucf                           2.007      Update Configuration File: preserv

dbconfig-common recommends no packages.

-- debconf information excluded


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to