Mysql – Access denied for user ‘root’@’localhost’ What proces is causing this

debianmariadbMySQL

I got this connections constantly in logs, how to trace what app is trying to connect?

root@localhost is allowed to connect and working for some apps. I think there is some app without changed password. How to trace it?

190310 22:38:57 [Warning] Access denied for user 'root'@'localhost'
(using password: YES) 190310 22:38:59 [Warning] Access denied for user
'root'@'localhost' (using password: YES) 190310 22:38:59 [Warning]
Access denied for user 'root'@'localhost' (using password: YES) 190310
22:39:03 [Warning] Access denied for user 'root'@'localhost' (using
password: YES)

Best Answer

One way to do this might be by finding out what local processes have the MySQL socket file open. First, determine where your socket file is. Not sure where it is on Debian, try /tmp/mysql.sock or /var/lib/mysql/mysql.sock, or check my.cnf for the location.

Next, since the failing connection comes and goes, you will need to "freeze" it temporarily in order to catch it in the act. You can do it by stopping the mysqld process. For example, run pgrep -l mysqld to determine its process ID, then sudo kill -STOP <PID> (replace <PID> with the actual ID, obviously).

Now you can run sudo lsof | grep mysql.sock (or whatever your socket file happens to be) to see every process that has the file open.

To "un-freeze" mysqld, run sudo kill -CONT <mysqld PID>

Related Solutions

Mysql Getting Access denied for user ‘root’@’localhost’ (using password: YES) constantly in log

A) You can check TCPdump output for MySQL port connection.

B) Also you can verify whether any script is running on MySQL server may be something like monit etc.. which continuously pings MySQL port.

Mysql – Access denied for user ‘root’@’localhost’ (using password yes)

If you installed MySQL 5.6 from the command line, the easiest way to find the temporary password is to go to the Linux command line do the following:

cd
cat `ls -la | grep mysql | grep secret | awk '{print $9}'` | awk '{print $18}'

This will quickly print the temporary password.

Try to login using that password

cd
OLDPASSFILE=`ls -la | grep mysql | grep secret | awk '{print $9}'`
PASSWORD=`cat ${OLDPASSFILE} | awk '{print $18}'
mysql -uroot -p${PASSWORD}

If the temporary password is no longer available, then you will have do the following:

NEWPASS="whateveriwant"
service mysql stop
service mysql start --skip-grant-tables
mysql -ANe"update mysql.user set password=PASSWORD('${NEWPASS}') where user='root'"
service mysql restart

Best Answer

Related Solutions

Mysql Getting Access denied for user ‘root’@’localhost’ (using password: YES) constantly in log

Mysql – Access denied for user ‘root’@’localhost’ (using password yes)

Give it a Try !!!

Related Question