Re: [Bug 119075] Re: Root password policy for mysql

2007-10-02 Thread Martin Pitt
Hi, Jamie Strandboge [2007-10-02 2:17 -]: > Wouldn't it be better to prompt for the password until we figure > out/have the time to implement the best way to not prompt safely? Full ack. -- Root password policy for mysql https://bugs.launchpad.net/bugs/119075 You received this bug notifica

Re: [Bug 119075] Re: Root password policy for mysql

2007-07-16 Thread Soren Hansen
On Mon, Jul 16, 2007 at 11:09:28AM -, Caspar Clemens Mierau wrote: > Well actually this is a huge step back on the timetable, isn't it? I > guess a patch for this feature will take some months for development and > security/stabilty testing. So that's the reason I hoped for skip-priv- > like so

Re: [Bug 119075] Re: Root password policy for mysql

2007-06-14 Thread Mathias Gug
On Mon, Jun 11, 2007 at 12:45:42PM -, Soren Hansen wrote: > However, after talking to Martin Pitt, we've decided to try to actually > *fix* things rather than patch them. I'll be filling a bug against the > debian package by the end of this week (or if someone else has the time, > feel free to

Re: [Bug 119075] Re: Root password policy for mysql

2007-06-10 Thread Ante Karamatić
Caspar Clemens Mierau wrote: > I guess /etc/defaults is also a good place for a variable to source. Right: # MySQL root password is empty. Enable MySQL service and set root's # password with 'mysqladmin -u root password [your new password]'. # # If root's password isn left empty, all local users

Re: [Bug 119075] Re: Root password policy for mysql

2007-06-10 Thread Ante Karamatić
Soren Hansen wrote: > Alright then. I've added a "resetpasswd" option to /etc/init.d/mysql > which asks for a new password (using whiptail) and sets it accordingly. Well, we have postfix which asks questions on installation, so adding questions to mysql shouldn't be a big problem. But, we shoul

Re: [Bug 119075] Re: Root password policy for mysql

2007-06-08 Thread Ante Karamatić
Caspar Clemens Mierau wrote: > Can name this? That would be the perfect solution as we only need to > call this. Check out Mathias's comments. -- Root password policy for mysql https://bugs.launchpad.net/bugs/119075 You received this bug notification because you are a member of Ubuntu Bugs, whi

Re: [Bug 119075] Re: Root password policy for mysql

2007-06-07 Thread Ante Karamatić
Caspar Clemens Mierau wrote: > 1. Are there any other applications where random passwords are set (that > you need)? Yes, mysql. People are unaware of this, but there is another root user in mysql wich has random password. Check /etc/mysql/debian.cnf. > 2. MySQL by default does not listen on a

Re: [Bug 119075] Re: Root password policy for mysql

2007-06-07 Thread Mathias Gug
On Thu, Jun 07, 2007 at 01:06:24PM -, Soren Hansen wrote: > On Thu, Jun 07, 2007 at 11:32:14AM -, Caspar Clemens Mierau wrote: > > Actually you can do the sudo thing without hacking mysql or touching > > mysql code. A rather simple init/shell-script (re)starting mysqld with > > skip privile

Re: [Bug 119075] Re: Root password policy for mysql

2007-06-07 Thread Soren Hansen
On Thu, Jun 07, 2007 at 11:32:14AM -, Caspar Clemens Mierau wrote: > Actually you can do the sudo thing without hacking mysql or touching > mysql code. A rather simple init/shell-script (re)starting mysqld with > skip privileges lets you overwrite existing root passwords, that is also > the way