[Snort-users] mysql error prevails...

AllowOverride allowoverride at ...11827...
Fri Oct 5 02:43:35 EDT 2012


no. didnt work.

ct  4 23:40:30 jupiter barnyard2[18518]:         --== Initializing
Barnyard2 ==--
Oct  4 23:40:30 jupiter barnyard2[18518]: Initializing Input Plugins!
Oct  4 23:40:30 jupiter barnyard2[18518]: Initializing Output Plugins!
Oct  4 23:40:30 jupiter barnyard2[18518]: Parsing config file
"/etc/snort/etc/barnyard2.conf"



Oct  4 23:40:39 jupiter barnyard2[18518]: Log directory
= /var/log/barnyard2
Oct  4 23:40:39 jupiter barnyard2[18518]: Initializing daemon mode
Oct  4 23:40:39 jupiter barnyard2[18519]: Daemon initialized, signaled
parent pid: 18518
Oct  4 23:40:39 jupiter barnyard2[18519]: PID path stat checked out ok,
PID path set to /var/run/
Oct  4 23:40:39 jupiter barnyard2[18519]: Writing PID "18519" to file
"/var/run//barnyard2_eth0.pid"
Oct  4 23:40:39 jupiter barnyard2[18518]: Daemon parent exiting
Oct  4 23:40:39 jupiter barnyard2[18519]: FATAL ERROR: database:
mysql_error: Access denied for user 'snort'@'localhost' (using password:
YES)


how can i check snort at ...274... besides show grants as snort user,
select * from db; or select * from user as root and snort. they all seem
correct. sighs...


On Thu, 2012-10-04 at 23:45 -0400, Marcos Rodriguez wrote:
> 
> On Oct 4, 2012 11:24 PM, "AllowOverride" <allowoverride at ...11827...>
> wrote:
> >
> > i dont think its my.cnf unless something is wrong here. i dont see
> it.
> >
> > [mysqld]
> > #
> > # * Basic Settings
> > #
> > user            = mysql
> > pid-file        = /var/run/mysqld/mysqld.pid
> > socket          = /var/run/mysqld/mysqld.sock
> > port            = 3306
> > basedir         = /usr
> > datadir         = /var/lib/mysql
> > tmpdir          = /tmp
> > lc-messages-dir = /usr/share/mysql
> > skip-external-locking
> > #
> > # Instead of skip-networking the default is now to listen only on
> > # localhost which is more compatible and is not less secure.
> > bind-address            = 127.0.0.1
> >
> >
> > also.....
> >
> > i log into the box via ssh. i then start snort, barnyard2, and
> recently
> > pulledpork.pl works fine, but access denied prevails for barnyard2..
> >
> > sighs...
> >
> >
> >
> > On Thu, 2012-10-04 at 21:16 -0400, Marcos Rodriguez wrote:
> > >         grants are fine, ufw is off, hostname is jupiter,
> snort.conf
> > >         is set to
> > >         localhost, or anywhere else it is required in howtos,
> yet... i
> > >         still get
> > >         this cheesy error,,, anyone come across this before? and
> saw
> > >         it was
> > >         something not common?
> > >
> > >         mysql --version
> > >         mysql  Ver 14.14 Distrib 5.5.24, for debian-linux-gnu
> (i686)
> > >         using
> > >         readline 6.2
> > >
> > >         mysqladmin --version
> > >         mysqladmin  Ver 8.42 Distrib 5.5.24, for debian-linux-gnu
> on
> > >         i686
> > >
> > >         sighs.
> 
> Ah, try commenting out the bind-address line and restart mysqld. I
> should have mentioned that before.  Apologies :-) 
> 
> marcos
> 





More information about the Snort-users mailing list