[tech] Cacti, was Re: mySQL/MariaDB password reset for unisfa-koha

[Nick Bannon]

On Mon, Feb 12, 2018 at 06:24:21PM +0800, Blair Johnson wrote:
> Hi all,
> Just a courtesy email regarding the mysql (MariaDB) server on Mussel.

Thanks!

The initial symptom was:
http://library.unisfa.asn.au/
<h1>Software error:</h1>
<pre>DBIx::Class::Storage::DBI::catch {...} (): DBI Connection failed:
Host '130.95.13.86' is blocked because of many connection errors;
unblock with 'mysqladmin flush-hosts' at
/usr/share/perl5/DBIx/Class/Storage/DBI.pm line 1490. at
/usr/share/koha/lib/Koha/Database.pm line 90</pre>
<p>For help, please send mail to the webmaster (<a href="mailto:[no address
given]">[no address given]</a>), giving this error message 
and the time and date of the error.</p>

The fix for that was indeed running 'mysqladmin flush-hosts' on mussel,
as root.

However, to login to https://secure.ucc.asn.au/phpmyadmin/ and test the
database that way:

> We've had to reset the password for the account that accesses UniSFA's koha
> database - it seems like a recent debian update may have been the cause as
> it required a "change in password format".

This also applied to the MariaDB root user - but coffee could log in with
a local user and reset the MariaDB root password. That, reassuringly,
let phpmyadmin work.

> Logging in as a local user on the server (cheers to Zach) and changing the
> password fixed the issue we had (koha's webpage not loading).
> 
> If anybody else has issues with the mysql server, this might be your issue
> too.
> 
> Cheers,
> Blair

There could be 70 or so database user accounts in that state.
https://secure.ucc.asn.au/phpmyadmin/server_privileges.php?showall=1

...possibly affecting:
https://secure.ucc.asn.au/cacti/
FATAL: Cannot connect to MySQL server on 'localhost'. Please make sure
you have specified a valid MySQL database name in 'include/config.php' 

mussel: ~>mariadb --user=cacti
ERROR 1275 (HY000): Server is running in --secure-auth mode, but
'cacti'@'localhost' has a password in the old format; please change the
password to the new format

Resetting that password to the one in mussel:/etc/cacti/debian.php
seemed promising, and seemed to trigger an upgrade...
Now https://secure.ucc.asn.au/cacti/graph_view.php works, but has no old
data?

Nick.

-- 
   Nick Bannon   | "I made this letter longer than usual because
nick-sig at rcpt.to | I lack the time to make it shorter." - Pascal