LP #915598: pt-config-diff ignores --ask-pass option

Description

**Reported in Launchpad by seattlegaucho last update 08-02-2012 15:29:40

A number of pt-* utilities in version 2.0.2 installed from the .deb package in your web site seem to ignore the --ask-pass option to ask for the user's password. I tried mostly the pt-config-diff using --ask-pass in different positions in the list of options:

Here are a few examples:
gerry@server-01:~$ pt-config-diff /etc/mysql/my.cnf --ask-pass --user=root h=localhost
DBI connect(';host=localhost;mysql_read_default_group=client','root',...) failed: Access denied for user 'root'@'localhost' (using password: NO) at /usr/bin/pt-config-diff line 1261
gerry@server-01:~$ pt-config-diff --ask-pass /etc/mysql/my.cnf --user=root h=localhost
DBI connect(';host=localhost;mysql_read_default_group=client','root',...) failed: Access denied for user 'root'@'localhost' (using password: NO) at /usr/bin/pt-config-diff line 1261
gerry@server-01:~$ pt-config-diff /etc/mysql/my.cnf --user=root h=localhost --ask-pass
DBI connect(';host=localhost;mysql_read_default_group=client','root',...) failed: Access denied for user 'root'@'localhost' (using password: NO) at /usr/bin/pt-config-diff line 1261

OS info:
uname -a; cat /etc/issue
Linux server-01 3.0.0-14-server #23-Ubuntu SMP Mon Nov 21 20:49:05 UTC 2011 x86_64 x86_64 x86_64 GNU/Linux
Ubuntu 11.10 \n \l

MySQL server info:
mysqladmin Ver 8.42 Distrib 5.1.58, for debian-linux-gnu on x86_64
Copyright 2000-2008 MySQL AB, 2008 Sun Microsystems, Inc.
This software comes with ABSOLUTELY NO WARRANTY. This is free software,
and you are welcome to modify and redistribute it under the GPL license

Server version 5.1.58-1ubuntu1-log
Protocol version 10
Connection Localhost via UNIX socket
UNIX socket /var/run/mysqld/mysqld.sock
Uptime: 1 hour 42 min 52 sec

Threads: 1 Questions: 3578 Slow queries: 0 Opens: 408 Flush tables: 1 Open tables: 64 Queries per second avg: 0.579

All other relevant packages are up to date.

Cheers,
G

Environment

None

Smart Checklist

Activity

Show:

lpjirasync January 24, 2018 at 3:04 PM

**Comment from Launchpad by: seattlegaucho on: 20-01-2012 19:21:02

Thank you very much for the fix. I'll upgrade it as soon as 2.0.3 hits the repositories.

BTW, this bug can easily be considered a show stopper in a secure environment like PCI depending on the organization. I wouldn't take its severity too lightly.

Cheers,
G

lpjirasync January 24, 2018 at 3:04 PM

**Comment from Launchpad by: Baron Schwartz on: 19-01-2012 20:27:13

WontFix in 1.0 series; this is minor. I also disagree this is critical; nothing bad happens, you just don't get to specify a password to log in. Nobody dies, no data is deleted, etc.

lpjirasync January 24, 2018 at 3:04 PM

**Comment from Launchpad by: Daniel Nichter on: 19-01-2012 20:11:29

Fix and will be released with 2.0.3. We may or may not backport this fix to the 1.0 series because the 2.0 fix uses a module (Cxn) that's not in 1.0.

Done

Details

Assignee

Reporter

Priority

Smart Checklist

Created January 24, 2018 at 3:03 PM
Updated January 24, 2018 at 3:04 PM
Resolved January 24, 2018 at 3:04 PM

Flag notifications