Loomio

Improve the security settings: drupal+mysql+onyx

J jclvanier Public Seen by 261

Do you agree with the following ?
1) disallow direct ssh root access to onyx; therefore create a regular user like "admin"
2) change the mysql user for drupal database
3) change the administrator name of mysql

J

jclvanier Sat 9 Mar 2013 7:48PM

1) topic related to the ssh key topic
2) drupal should not handle the root's password of onyx nor the mysql admin account
3) should be different from the unix root account or, at least, shoud not have the same password

J

jclvanier Sat 9 Mar 2013 8:02PM

If agreed by the infra team, i will not be able to make the changes before Monday, but if anyone else can do ... ;)

J

jclvanier Mon 11 Mar 2013 5:19PM

All changes done :)

RJ

Raphaël Jadot Mon 10 Jun 2013 12:54PM

@anuragbhandari @jclvanier @johncave I added these two lines in config.inc.php for phpmyadmin
$cfg['ProtectBinary'] = FALSE;
$cfg['ShowBlob'] = TRUE;

because most mysql content of mediawiki is done in binary.

AB

Anurag Bhandari Mon 10 Jun 2013 4:46PM

@raphaeljadot Are these settings supposed to expose the blobs in the DB? What are these for exactly?

RJ

Raphaël Jadot Mon 10 Jun 2013 8:04PM

@anuragbhandari only binary records are perfectly managed by mediawiki, but by default, phpmyadmin don't display nor let edit them. So it's not very useful, when you want to edit interwiki db :)

AB

Anurag Bhandari Tue 11 Jun 2013 12:45AM

@raphaeljadot Right. JCL and I too noticed that in some cases the interwiki table has blobs. Good to know there's a config setting to make the blobs readable :)

J

jclvanier Wed 12 Jun 2013 7:21AM

Raphaël: I cannot find where (on which server) you have done the changes.
I had also searched for editing blobs but, tested on my laptop (PMA 3.5.3):
-- $cfg['ShowBlob'] = TRUE;
works (without this setting, there is still an option in the PMA interface to see the blobs. See also
http://wiki.phpmyadmin.net/pma/Config#ShowBlob).
-- $cfg['ProtectBinary'] = FALSE;
doesn't seem to have any effect.

We can still export, edit and import the field.

AB

Anurag Bhandari Thu 13 Jun 2013 3:11PM

I think Raphael made the blob change on Ruby. Right?

RJ

Raphaël Jadot Wed 19 Jun 2013 8:43AM

@anuragbhandari @jclvanier I made a change few days before and it worked, do you have problem to edit blobs?