Do not try to connect to (any) mysql from a bastion host- there is a firewall there and, depending on the user, grants are restricted to specific hosts.
The only hosts that are allowed to connect you "your" mysqls are stat* host (for example, I do not have the complete list here). If you were able to connect before from elsewhere, you were exploiting a non-intended gap.
BTW, please start thinking soon about eliminating all non-application-specific shared accounts and start thinking about individual accounts so we can better enforce security policies. It has been requested both by Security and Research, but will affect analytics, too.
On Fri, Feb 12, 2016 at 5:51 PM, Jonathan Morgan jmorgan@wikimedia.org wrote:
FWIW, I also use Sequel Pro and I am currently able to connect to S1 using the researcher credentials. Here's a screencap of my login. Looks like the only difference is that I'm using stat1003.eqiad.wmnet to tunnel in. Try that? - J
[image: Inline image 1]
On Fri, Feb 12, 2016 at 8:39 AM, Madhumitha Viswanathan < mviswanathan@wikimedia.org> wrote:
+Jaime. May be he knows if something changed.
On Fri, Feb 12, 2016 at 8:38 AM, Dmitry Brant dbrant@wikimedia.org wrote:
I'm also having the same issue logging in via GUI clients (Sequel Pro, and MySQL Workbench). I was definitely able to use them successfully earlier this week.
On Fri, Feb 12, 2016 at 11:27 AM, Nuria Ruiz nuria@wikimedia.org wrote:
Correction: s1-analytics-slave.eqiad.wmnet is the correct host, we connect there via 1002 when we do it on terminal.
On Fri, Feb 12, 2016 at 8:23 AM, Nuria Ruiz nuria@wikimedia.org wrote:
Sorry, Jon. I do not think any of us in the team use anything but command line but couple things:
- I would try to connect to stat1002.eqiad.wmnet (not sure if
s1-analytics-slave.eqiad.wmnet is a dns alias to this machine)
- the my sql cnf you want to use cannot be edited as it is managed by
puppet and located at /etc/mysql/conf.d/analytics-research-client.cnf on the machine above.
On Thu, Feb 11, 2016 at 5:04 PM, Jon Katz jkatz@wikimedia.org wrote:
Hi Folks, I have no trouble connecting to s1-analytics-slave.eqiad.wmnet via terminal, but when I try to use my favorite GUI (sequel pro), I am suddenly having trouble. I was out for over a month, so there might have been changes during that time--I think I had trouble just before leaving as well.
Here is my setup: [image: Inline image 1]
And here is my error.
MySQL said: Lost connection to MySQL server at 'reading initialcommunication packet', system error: 0*
Could anyone spare some time tomorrow to troubleshoot with me? The FAQ for sequel pro says the following:
"On the server, configure MySQL by editing /etc/my.cnf and comment or remove skip-networking from the [mysqld] section. Then, restart MySQL Server."
Thanks,
J
Analytics mailing list Analytics@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/analytics
Analytics mailing list Analytics@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/analytics
-- Dmitry Brant Mobile Apps Team (Android) Wikimedia Foundation https://www.mediawiki.org/wiki/Wikimedia_mobile_engineering
Analytics mailing list Analytics@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/analytics
-- --Madhu :)
Analytics mailing list Analytics@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/analytics
-- Jonathan T. Morgan Senior Design Researcher Wikimedia Foundation User:Jmorgan (WMF) https://meta.wikimedia.org/wiki/User:Jmorgan_(WMF)
