CAcert System Admins discussion list

[<ulrich AT cacert.org>]

Hi Wytze,

thanks for your quick response and fix =:)

I can confirm, ca-mgr1 and cacert1 now works again  :)

and yes, set binding to 0.0.0.0 (which is all interfaces)
to not restrict to localhost connections only (aka 127.0.0.1)
is one possible option   =:)

regards, uli   ;-)


-----Original Message-----
From: Wytze van der Raay 
[mailto:wytze AT cacert.org]
 
Sent: Saturday, May 11, 2013 5:49 PM
To: 
ulrich AT cacert.org
Cc: 
cacert-sysadm AT lists.cacert.org;
 
cacert-devel AT lists.cacert.org;
'Andreas Bäß'
Subject: Re: cacert1 test server upgrade


Hi Ulrich,

Op 11-5-2013 16:00, 
ulrich AT cacert.org
 schreef:
> probably after system upgrade
> the sql connection from ca-mgr1.it-sls.de to cacert1.it-sls.de
> doesn't work
> 
> I've just created a new account and wanted to read the email
> sent by the system to confirm the newly created account
> via ca-mgr1 ... but receiving following error message:
> 
> An error occurred
> Application error
> Exception information:
> 
> Message: SQLSTATE[HY000] [2013] Lost connection to MySQL server at
> 'reading initial communication packet', system error: 111

I see, that means your ca-mgr1 gets a 'connection refused'. The firewall
has not been changed, but what has been changed is the setting of
bind-address in /etc/mysql/my.cnf. I copied this more or less blindly
from the production server and cacert2 test server, ie. 127.0.0.1.
But probably it was set to a different value before ...

> ...
> If this doesn't solve the problem, probably mysql configuration
> requires some modifications
> read some hints under
> https://wiki.cacert.org/SystemAdministration/Systems/Development
> section "Alternate Manual Modification Options on RAW ESX VM for local
> use"
> point 6.

According to that documentation, the bind-address should be set to
192.109.159.23 (the machien IP), but that doesn't work either, since
the local web application expects to be able to connect to 127.0.0.1.

So I have set the bind-address to 0.0.0.0 now (presumably it was like
that before the upgrade?), and recorded this in a separate additional
mysql config file: /etc/mysql/conf.d/cacert.cfg. Thus it won't be lost
by possible future updates to /etc/mysql/my.cnf.

As far as I can tell, ca-mgr1 is working now again. Thanks for your
accurate error report, and sorry for the inconvenience!

Regards,
-- wytze

Attachment: smime.p7s
Description: S/MIME cryptographic signature