Dotaz: Jak zpristupnit mysql databazi systemovemu uzivateli

[polo23]

Ahoj, resim v praci jeden problem ohledne pristupu do mysql databaze a uz si nevim rady tak snad nekdo z vas me nasmeruje:)
Potrebujeme jednoduchy check do nagiosu na monitorovanu mysql (staci nam plugin, ktery nagios pro mysql ma).

/usr/lib/nagios/plugins/check_mysql

Kdyz ho spustim takto pod rootem tak to funguje.

/usr/lib/nagios/plugins/check_mysql -d mysql -u root

Heslo pro roota na pristup do DB si podle me taha z

/root/.my.cnf

. Pak mame na serveru systemoveho uzivatele nagios (nema home tudiz nema odkud tahat heslo) pod kterym porebuju spustit prikaz:

/usr/lib/nagios/plugins/check_mysql -d mysql -u root -p "heslo"

to heslo tam samozrejme napsat nemuzu pac by pak bylo videt ve spustenych procesech. Cestu k souboru mi to taky nevezme:

nagios@server:/$ sudo /usr/lib/nagios/plugins/check_mysql -d mysql -u root -p /root/.my.cnf 
Access denied for user 'root'@'localhost' (using password: YES)

Potrebuju aby si ho tahal z /root/.my.cnf kam ma samozrejme pristup pro cteni. Buhuzel nevim jak mu vnutit aby si ho od tamtud tahal. To je to s cim potrebuju poradit.
Jinak prikladam napovedu k vyse uvedenemu prikazu:

/usr/lib/nagios/plugins/check_mysql --help
check_mysql v1991 (nagios-plugins 1.4.12)


This program tests connections to a MySQL server


Usage: check_mysql [-d database] [-H host] [-P port] [-s socket]
       [-u user] [-p password] [-S]

Options:
 -h, --help
    Print detailed help screen
 -V, --version
    Print version information
 -H, --hostname=ADDRESS
    Host name, IP Address, or unix socket (must be an absolute path)
 -P, --port=INTEGER
    Port number (default: 3306)
 -s, --socket=STRING
    Use the specified socket (has no effect if -H is used)
 -d, --database=STRING
    Check database with indicated name
 -u, --username=STRING
    Connect using the indicated username
 -p, --password=STRING
    Use the indicated password to authenticate the connection
    ==> IMPORTANT: THIS FORM OF AUTHENTICATION IS NOT SECURE!!! <==
    Your clear-text password could be visible as a process table entry
 -S, --check-slave
    Check if the slave thread is running properly.
 -w, --warning
    Exit with WARNING status if slave server is more than INTEGER seconds
    behind master
 -c, --critical
    Exit with CRITICAL status if slave server is more then INTEGER seconds
    behind master

 There are no required arguments. By default, the local database is checked
 using the default unix socket. You can force TCP on localhost by using an
 IP address or FQDN ('localhost' will use the socket as well).

Send email to nagios-users@lists.sourceforge.net if you have questions
regarding use of this software. To submit patches or suggest improvements,
send email to nagiosplug-devel@lists.sourceforge.net

Odpovědi

[voda]

Ahoj, nešla by nastavit proměnná $HOME na /root?

[polo23]

Ahoj, nejdrive Ti musim podekovat pac s nastavenim HOME=/root to funguje. Bouzel nevim jestli takove reseni muj nadrizeny bude akceptovat.
jeste bych dodal ze v /etc/sudoers je pro uzivatele nagios nasledujici radek.

nagios  ALL=NOPASSWD:/usr/lib/nagios/plugins/check_mysql

[voda]

Tak potom ještě funguje $ mysql --defaults-extra-file=/root/.my.cnf. Více v dokumentaci Using Option Files. Pak už je jedno, kde bude soubor s uživatelem a heslem uložen.