Snort mailing list archives

Re: mysql error prevails...


From: AllowOverride <allowoverride () gmail com>
Date: Thu, 04 Oct 2012 23:43:35 -0700

no. didnt work.

ct  4 23:40:30 jupiter barnyard2[18518]:         --== Initializing
Barnyard2 ==--
Oct  4 23:40:30 jupiter barnyard2[18518]: Initializing Input Plugins!
Oct  4 23:40:30 jupiter barnyard2[18518]: Initializing Output Plugins!
Oct  4 23:40:30 jupiter barnyard2[18518]: Parsing config file
"/etc/snort/etc/barnyard2.conf"



Oct  4 23:40:39 jupiter barnyard2[18518]: Log directory
= /var/log/barnyard2
Oct  4 23:40:39 jupiter barnyard2[18518]: Initializing daemon mode
Oct  4 23:40:39 jupiter barnyard2[18519]: Daemon initialized, signaled
parent pid: 18518
Oct  4 23:40:39 jupiter barnyard2[18519]: PID path stat checked out ok,
PID path set to /var/run/
Oct  4 23:40:39 jupiter barnyard2[18519]: Writing PID "18519" to file
"/var/run//barnyard2_eth0.pid"
Oct  4 23:40:39 jupiter barnyard2[18518]: Daemon parent exiting
Oct  4 23:40:39 jupiter barnyard2[18519]: FATAL ERROR: database:
mysql_error: Access denied for user 'snort'@'localhost' (using password:
YES)


how can i check snort@localhost besides show grants as snort user,
select * from db; or select * from user as root and snort. they all seem
correct. sighs...


On Thu, 2012-10-04 at 23:45 -0400, Marcos Rodriguez wrote:

On Oct 4, 2012 11:24 PM, "AllowOverride" <allowoverride () gmail com>
wrote:

i dont think its my.cnf unless something is wrong here. i dont see
it.

[mysqld]
#
# * Basic Settings
#
user            = mysql
pid-file        = /var/run/mysqld/mysqld.pid
socket          = /var/run/mysqld/mysqld.sock
port            = 3306
basedir         = /usr
datadir         = /var/lib/mysql
tmpdir          = /tmp
lc-messages-dir = /usr/share/mysql
skip-external-locking
#
# Instead of skip-networking the default is now to listen only on
# localhost which is more compatible and is not less secure.
bind-address            = 127.0.0.1


also.....

i log into the box via ssh. i then start snort, barnyard2, and
recently
pulledpork.pl works fine, but access denied prevails for barnyard2..

sighs...



On Thu, 2012-10-04 at 21:16 -0400, Marcos Rodriguez wrote:
        grants are fine, ufw is off, hostname is jupiter,
snort.conf
        is set to
        localhost, or anywhere else it is required in howtos,
yet... i
        still get
        this cheesy error,,, anyone come across this before? and
saw
        it was
        something not common?

        mysql --version
        mysql  Ver 14.14 Distrib 5.5.24, for debian-linux-gnu
(i686)
        using
        readline 6.2

        mysqladmin --version
        mysqladmin  Ver 8.42 Distrib 5.5.24, for debian-linux-gnu
on
        i686

        sighs.

Ah, try commenting out the bind-address line and restart mysqld. I
should have mentioned that before.  Apologies :-) 

marcos



------------------------------------------------------------------------------
Don't let slow site performance ruin your business. Deploy New Relic APM
Deploy New Relic app performance management and know exactly
what is happening inside your Ruby, Python, PHP, Java, and .NET app
Try New Relic at no cost today and get our sweet Data Nerd shirt too!
http://p.sf.net/sfu/newrelic-dev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!


Current thread: