[Pkg-mediawiki-devel] Bug#344361: mediawiki: password-sensitive config script

[James R. Van Zandt]

Package: mediawiki
Version: 1.4.12-1
Severity: normal


I tried to configure mediawiki using the automatic tool at

http://localhost/mediawiki/config/index.php

but it kept failing with the message

  MySQL error 1045: Access denied for user 'root'@'localhost' (using password: YES)

I had just installed mysql and had root access, using a password
different from the system root account.

I changed the mysql root password using the procedure here:
  http://dev.mysql.com/doc/refman/5.0/en/resetting-permissions.html

and the configuration succeeded.  I think the only significant change
was that the original password had special characters (@ and $) but
the second one had only numbers and letters.  I suspect the
configuration script isn't escaping the password.

           - Jim Van Zandt


-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (990, 'unstable'), (500, 'oldstable'), (500, 'testing')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.14
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

Versions of packages mediawiki depends on:
ii  apache2                       2.0.55-3   next generation, scalable, extenda
ii  apache2-mpm-prefork [httpd]   2.0.55-3   traditional model for Apache2
ii  debconf [debconf-2.0]         1.4.58     Debian configuration management sy
ii  php4                          4:4.4.0-4  server-side, HTML-embedded scripti
ii  php4-mysql                    4:4.4.0-4  MySQL module for php4

Versions of packages mediawiki recommends:
ii  mysql-server                  4.1.15-1   mysql database server (transitiona
ii  mysql-server-4.1 [mysql-serve 4.1.15-1   mysql database server binaries

-- debconf information:
* mediawiki/webserver: apache2