Do not try to connect to (any) mysql from a bastion host- there is a firewall there and, depending on the user, grants are restricted to specific hosts.

The only hosts that are allowed to connect you "your" mysqls are stat* host (for example, I do not have the complete list here). If you were able to connect before from elsewhere, you were exploiting a non-intended gap.

BTW, please start thinking soon about eliminating all non-application-specific shared accounts and start thinking about individual accounts so we can better enforce security policies. It has been requested both by Security and Research, but will affect analytics, too.

On Fri, Feb 12, 2016 at 5:51 PM, Jonathan Morgan <jmorgan@wikimedia.org> wrote:
FWIW, I also use Sequel Pro and I am currently able to connect to S1 using the researcher credentials. Here's a screencap of my login. Looks like the only difference is that I'm using stat1003.eqiad.wmnet to tunnel in. Try that? - J

Inline image 1

On Fri, Feb 12, 2016 at 8:39 AM, Madhumitha Viswanathan <mviswanathan@wikimedia.org> wrote:
+Jaime. May be he knows if something changed.

On Fri, Feb 12, 2016 at 8:38 AM, Dmitry Brant <dbrant@wikimedia.org> wrote:
I'm also having the same issue logging in via GUI clients (Sequel Pro, and MySQL Workbench).
I was definitely able to use them successfully earlier this week.


On Fri, Feb 12, 2016 at 11:27 AM, Nuria Ruiz <nuria@wikimedia.org> wrote:
Correction: 
s1-analytics-slave.eqiad.wmnet  is the correct host, we connect there via 1002 when we do it on terminal. 





On Fri, Feb 12, 2016 at 8:23 AM, Nuria Ruiz <nuria@wikimedia.org> wrote:
Sorry, Jon. I do not think any of us in the team use anything but command line but couple things:

- I would try to connect to stat1002.eqiad.wmnet (not sure if  s1-analytics-slave.eqiad.wmnet  is a dns alias to this machine)

- the my sql cnf you want to use cannot be edited as it is managed by puppet and located at /etc/mysql/conf.d/analytics-research-client.cnf on the machine above.





On Thu, Feb 11, 2016 at 5:04 PM, Jon Katz <jkatz@wikimedia.org> wrote:
Hi Folks,
I have no trouble connecting to s1-analytics-slave.eqiad.wmnet via terminal, but when I try to use my favorite GUI (sequel pro), I am suddenly having trouble.  I was out for over a month, so there might have been changes during that time--I think I had trouble just before leaving as well.

Here is my setup:
Inline image 1

And here is my error. 
     MySQL said: Lost connection to MySQL server at 'reading initial communication packet', system error: 0

 Could anyone spare some time tomorrow to troubleshoot with me?  The FAQ for sequel pro says the following:

"On the server, configure MySQL by editing /etc/my.cnf and comment or remove skip-networking from the [mysqld] section. Then, restart MySQL Server."

Thanks,

J





_______________________________________________
Analytics mailing list
Analytics@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/analytics




_______________________________________________
Analytics mailing list
Analytics@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/analytics




--
Dmitry Brant
Mobile Apps Team (Android)
Wikimedia Foundation
https://www.mediawiki.org/wiki/Wikimedia_mobile_engineering


_______________________________________________
Analytics mailing list
Analytics@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/analytics




--
--Madhu :)

_______________________________________________
Analytics mailing list
Analytics@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/analytics




--
Jonathan T. Morgan
Senior Design Researcher
Wikimedia Foundation




--
Jaime Crespo
<http://wikimedia.org>