{Securich} Securich 0.2.5 on MySQL 5.0.66 Enterprise

18 views
Skip to first unread message

Reinald Kirchner

unread,
Apr 21, 2010, 5:15:16 AM4/21/10
to secu...@googlegroups.com
Hi,

I'm trying to get this combination working. First thing was to get it
installed, as the 5.0.66 does not yet provide the
information_schema.processlist view. So I had to change 3 SPs
referencing this.

Of course the installer script needed some changes as well in return
to pick this files and not unpack a new download.

No I've got the DB and SPs loaded, I can create and read roles. But I
get errors when trying to "call grant_privileges(...)" to create the
users. I returns the generic error message that something failed
creating the user or granting privileges. When I check the tables I
can see; that the users were inserted in "sec_users", but not created
as MySQL users.

Any idea what might be broken or where to tweak it to get it working?
I know that 5.0.66 is outdated anyway, but update for that is not yet
in sight, so I need to get around it (if that is the cause for the
problems).

any help highly appreciated,

Reinald


--
Subscription settings: http://groups.google.com/group/securich/subscribe?hl=en

Darren Cassar

unread,
Apr 23, 2010, 1:58:19 PM4/23/10
to secu...@googlegroups.com
Hi Reinald,

Thank you for trying to port securich to 5.0, it's a good initiative and i'll be more than happy to help you succeed.

The install script already checks if you got the necessary version of mysql (install script line number 394 for tcp connection and 535 for socket when doing an a fresh install and lines 734 for tcp, 837 for socket when doing an update).

The only files you should need to update are:
procedures/block_user_5.0.sql
procedures/drop_user_5.0.sql
procedures/revoke_privileges_5.0.sql

but then again i'm not 100% about it since I haven't tinkered enough with securich on 5.0.

Ok so grant_privileges is giving you grief, the way to debug it is to go to line 188 and delete:

      DECLARE EXIT HANDLER FOR SQLEXCEPTION
      BEGIN
         ROLLBACK;
         call reconciliation('sync');
         FLUSH PRIVILEGES;

         SELECT 'Error occurred - terminating - USER CREATION AND / OR PRIVILEGES GRANT FAILED' as ERROR;
      END;

Once you try to create a user again it'll throw the mysql error at you instead of capturing it directly.

Can you possibly send me the securich database content so I can have a look at the status of the tables? 

Cheers,
Darren
Reply all
Reply to author
Forward
0 new messages