Page MenuHomePhabricator

Reset password for database user p50380g50491
Closed, ResolvedPublic

Description

Due to an improbable series of blunders by myself, I've lost the .my.cnf file associated with project user 'tb-dev'.

Could a kind DBA recover or reset the password for database user 'p50380g50491' and and recreate '/data/project/tb-dev/.my.cnf' please.

Event Timeline

We cannot recover the passwords, as it is hashed.
Probably the best shot here is to reset the password and regenerate your .my.cnf.

I am sure that is done with a script and not manually, maybe @chasemp or @yuvipanda know more about how to do it?

yuvipanda claimed this task.

Users of the pXXXgXXX variety have been depreacted for a long time now. I see there's a replica.my.cnf file for tb-dev with credentials that do work - please use that. Thanks!

Okay ta. Can you GRANT ALL to s51111 on the databases below please. I'll migrate them to the proper names over the next few weeks and raise a new ticket to drop p50380g50491's databases when done. Cheers.


On s1.labsdb:

p50380g50491_common
p50380g50491rlrl_enwiki_p
p50380g50491
rlrl_ptwiki_p
p50380g50491unlikely_enwiki_p
p50380g50491
unlikely_ptwiki_p

On s3.labsdb:

p50380g50491_common
p50380g50491rlrl_cawiki_p
p50380g50491
rlrl_frwiki_p
p50380g50491rlrl_lvwiki_p
p50380g50491
unlikely_lvwiki_p

We granted you all on: p50380g50491_common the other databases didn't exist on either labs or tool boxes.

Apologies, double-underscores seem to get eaten by Phabricator's markup parser.

On s1.labsdb:

p50380g50491_common
p50380g50491__rlrl_enwiki_p
p50380g50491__rlrl_ptwiki_p
p50380g50491__unlikely_enwiki_p
p50380g50491__unlikely_ptwiki_p

On s3.labsdb:

p50380g50491_common
p50380g50491__rlrl_cawiki_p
p50380g50491__rlrl_frwiki_p
p50380g50491__rlrl_lvwiki_p
p50380g50491__unlikely_lvwiki_p

Thanks for the clarification.
I have granted access to those databases.
Please check them and let us know if that works!

@Marostegui and others ops, grants are wildcards, never use _ without escaping (\_) on a grant. It is not a big deal here, but it can lead to security problems.

@Tb your grants have been added- you should be able to access old data- however, you should consider those grants temporary, until you rename the databases to start with s51111__. We are not in hurry, take your time, but we will delete those special grants eventually (you can create and delete s51111__... databases at will). Specifically, those grants are not tracked and may be lost when a physical server change happens.

You can easily rename databases in a very fast way with the [[ https://dev.mysql.com/doc/refman/5.7/en/rename-table.html | RENAME TABLE ... TO ... ]] command, without needing a full reimport.

Great thanks. although I missed one in the list above; can you grant all to s51111 on p50380g50491_inconsistent_redirects on s1.labsdb also please.

In T155902#2965899, @Tb wrote:

Great thanks. although I missed one in the list above; can you grant all to s51111 on p50380g50491_inconsistent_redirects on s1.labsdb also please.

this has been done