Community Forums
Connect with us on LinkedIn
+ Reply to Thread
Results 1 to 12 of 12
  1. #1
    Member sh4ka's Avatar
    Join Date
    May 2005
    Posts
    434

    Exclamation Mysql root password at root directory ?



    I just realise that.. there is a my.cnf (hidden) at /root/ directory on my cPanel box...

    Inside the file I can see this:

    [client]
    user="root"
    pass="xxxxxxxxxxxxxxx"

    Is this normal ? should I remove it safety?

    thank you.

  2. #2
    aby
    aby is offline
    Member aby's Avatar
    Join Date
    May 2005
    Location
    India
    Posts
    638

    Lightbulb

    Quote Originally Posted by sh4ka


    I just realise that.. there is a my.cnf (hidden) at /root/ directory on my cPanel box...

    Inside the file I can see this:

    [client]
    user="root"
    pass="xxxxxxxxxxxxxxx"

    Is this normal ? should I remove it safety?

    thank you.
    That is quite normal. You can safely remove that entry. But the only thing is that you have to provide the password each time you try to login to mysql as root. Otherwise it won't promt if you try to login as root..
    Aby

    MSN "abyvarghese007"
    Yahoo " abyattaikkulathu"

    http://slashome.com

  3. #3
    Member sh4ka's Avatar
    Join Date
    May 2005
    Posts
    434

    Default

    Yeap... you are right I just tested it.
    Also.. connecting from the windows clinet SSH Secure Shell.. it won't ask for the password too? It happend to me yesterday, from the SSH Secure Shell client from WinXP once logued I just type exit and then press the spacebar and was getting into the system inmmediately witouth any password question. That didn't happen at my linux ssh client.. does this have anything relationated with the root pass ath that mysql archive ?

    thkz!

  4. #4
    aby
    aby is offline
    Member aby's Avatar
    Join Date
    May 2005
    Location
    India
    Posts
    638

    Lightbulb

    Quote Originally Posted by sh4ka
    Yeap... you are right I just tested it.
    Also.. connecting from the windows clinet SSH Secure Shell.. it won't ask for the password too? It happend to me yesterday, from the SSH Secure Shell client from WinXP once logued I just type exit and then press the spacebar and was getting into the system inmmediately witouth any password question. That didn't happen at my linux ssh client.. does this have anything relationated with the root pass ath that mysql archive ?

    thkz!
    I am not getting you.. You mean logging to mysql from shell or logging to the server through
    some ssh client.
    Aby

    MSN "abyvarghese007"
    Yahoo " abyattaikkulathu"

    http://slashome.com

  5. #5
    Member sh4ka's Avatar
    Join Date
    May 2005
    Posts
    434

    Default

    Sorry for my bad "tarzan" english
    I mean logging to the server through
    some ssh client.

  6. #6
    aby
    aby is offline
    Member aby's Avatar
    Join Date
    May 2005
    Location
    India
    Posts
    638

    Lightbulb

    Quote Originally Posted by sh4ka
    Sorry for my bad "tarzan" english
    I mean logging to the server through
    some ssh client.
    Well... that doesnot have anything to do with mysql authentication. That might have been some property of your ssh client, like they might have some options for storing the pasword. Though Iam not sure on that case.
    Aby

    MSN "abyvarghese007"
    Yahoo " abyattaikkulathu"

    http://slashome.com

  7. #7
    Super Moderator This forum account has been confirmed by cPanel staff to represent a vendor. chirpy's Avatar
    Join Date
    Jun 2002
    Location
    Go on, have a guess
    Posts
    13,495

    Default

    As long as your /rot directory permissions are correct, there should be little risk in having your root password in /root/my.cnf. The benefits probably outweigh the likely risk involved.
    Jonathan Michaelson

    Need your cPanel servers secured and tuned?
    cPanel Server Configuration, Security, Recovery and Antivirus/AntiSpam Services
    Developers of the most effective (and free) Firewall & Security Solution for cPanel Servers - csf
    http://www.configserver.com

  8. #8
    Member sh4ka's Avatar
    Join Date
    May 2005
    Posts
    434

    Default

    Thank you very much Aby!
    Does anyone knows what be this rare thing in the ssh client ?

  9. #9
    Super Moderator This forum account has been confirmed by cPanel staff to represent a vendor. chirpy's Avatar
    Join Date
    Jun 2002
    Location
    Go on, have a guess
    Posts
    13,495

    Default

    It's possible that your SSH client is caching the password (unless you have set up key authentication and you would know if you had). Which SSH client are you using?
    Jonathan Michaelson

    Need your cPanel servers secured and tuned?
    cPanel Server Configuration, Security, Recovery and Antivirus/AntiSpam Services
    Developers of the most effective (and free) Firewall & Security Solution for cPanel Servers - csf
    http://www.configserver.com

  10. #10
    Super Moderator This forum account has been confirmed by cPanel staff to represent a vendor. chirpy's Avatar
    Join Date
    Jun 2002
    Location
    Go on, have a guess
    Posts
    13,495

    Default

    That's not something that I've seen before. AFAIK, it's only recreated if you set the MySQL password through WHM.
    Jonathan Michaelson

    Need your cPanel servers secured and tuned?
    cPanel Server Configuration, Security, Recovery and Antivirus/AntiSpam Services
    Developers of the most effective (and free) Firewall & Security Solution for cPanel Servers - csf
    http://www.configserver.com

  11. #11
    Member sh4ka's Avatar
    Join Date
    May 2005
    Posts
    434

    Default

    I use for Win the SSH Secure Shell client 3.9x...
    But that is not important righ now Chirpy, minutes ago I deleted the .my.cnf mysql password file, but now I can see that it is again there!! :S with another mysql password!!! What the *** is happeping , how can it be generated automatically with another password ?

    Help me please, this is very rare :S

  12. #12
    Member sh4ka's Avatar
    Join Date
    May 2005
    Posts
    434

    Default

    How can I stopp this automattically generation of the my.cnf file? I just don't want it generated on my root directory... Maybe if I set the root pass using shell ?

    And the most worry thing that I'm thinking... I don't really care if someone can login to the mysql using shell because at that state they already have the server root password and the can do anything... but the thing that is getting me nervious is if the can login as root using the phpmyadmni by the browser..

    Any ideas how to stop this automatic file ?


    Quote Originally Posted by chirpy
    That's not something that I've seen before. AFAIK, it's only recreated if you set the MySQL password through WHM.

Similar Threads & Tags
Similar threads

  1. possible to change WHM root indepdently from server root password
    By jfall123 in forum cPanel and WHM Discussions
    Replies: 1
    Last Post: 01-12-2011, 11:53 AM
  2. cpanel bug / Get root access with root password
    By majidnt in forum cPanel and WHM Discussions
    Replies: 19
    Last Post: 08-24-2005, 11:12 AM
  3. How do you password protect the root directory?
    By kencl in forum cPanel and WHM Discussions
    Replies: 9
    Last Post: 04-30-2004, 04:31 AM
  4. Password for the root directory
    By tambo in forum cPanel and WHM Discussions
    Replies: 1
    Last Post: 10-03-2003, 07:44 AM
  5. Index Manager/Password Protection on Root Web Directory?
    By Jeff75 in forum cPanel and WHM Discussions
    Replies: 1
    Last Post: 08-21-2003, 10:40 AM
Linkedin       Facebook       Twitter       RSS       Flickr       YouTube