RE: ACID Error: Error (p) connecting to DB

["Paul Pearston" <paul.pearston () btinternet com>]

Tim,
I have edited acid_conf.php file and set the values to reflect those of
my snort database. What I was trying to highlight below was that I can
access the snort database manually from a shell prompt and query one of
the tables with the same variables as I have configured in my
acid_conf.php. An extract of the file is as follows:
 
/* Alert DB connection parameters
 *   - $alert_dbname   : MySQL database name of Snort alert DB
 *   - $alert_host     : host on which the DB is stored
 *   - $alert_port     : port on which to access the DB
 *   - $alert_user     : login to the database with this user
 *   - $alert_password : password of the DB user
 *
 *  This information can be gleaned from the Snort database
 *  output plugin configuration.
 */
$alert_dbname   = "snort";
$alert_host     = "localhost";
$alert_port     = "3306";
$alert_user     = "snort";
$alert_password = "sn0rt";
 
/* Archive DB connection parameters
*$archive_dbname   = "snort_archive";
*$archive_host     = "localhost";
*$archive_port     = "";
*$archive_user     = "root";
*$archive_password = "mypassword";
*/
 
I commented out the Archive DB as I don't have one. I'm correct in
assuming that this wouldn't cause me a problem?
 
Thanks,
Paul
 
 
-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of Slighter,
Tim
Sent: 05 May 2003 21:34
To: 'Paul Pearston'; 'Michael Steele'; snort-users () lists sourceforge net
Subject: RE: [Snort-users] ACID Error: Error (p) connecting to DB
 
Your answer has nothing to do with the answer you received.  There is a
main configuration file in the ACID directory called "acid_conf.php"
that must be edited to reflect the db values for your snort database:
 
/* Alert DB connection parameters
* - $alert_dbname : MySQL database name of Snort alert DB
* - $alert_host : host on which the DB is stored
* - $alert_port : port on which to access the DB
* - $alert_user : login to the database with this user
* - $alert_password : password of the DB user
*
* This information can be gleaned from the Snort database
* output plugin configuration.
*/
$alert_dbname = "snort_log";
$alert_host = "localhost";
$alert_port = "";
$alert_user = "root";
$alert_password = "mypassword";
-----Original Message-----
From: Paul Pearston [mailto:paul.pearston () btinternet com]
Sent: Monday, May 05, 2003 1:55 PM
To: 'Michael Steele'; snort-users () lists sourceforge net
Subject: RE: [Snort-users] ACID Error: Error (p) connecting to DB
I think so. I can access my database using the following commands, which
matches the alert_user, alert_password and alert_dbname variables set
with acid_config.php, without receiving an error:
 
Mysql -u snort -psn0rt snort
Mysql>Select * from event;
 
 
Admittedly, it's the first time that I have used MySQL, PHP and ACID,
however, I have been following these instructions:
 
 http://www.superhac.com/docs/snort_enterprise.pdf
 
I did, however, install MySQL v4.1 server and client as opposed to v4.0
as documented in the above instructions. And, MySQL 3.23 shared
libraries as there are dependency problems with the v4.0/v4.1 with
RedHat 9 as per the instructions.
 
Should I downgrade to MySQL v4.0?
 
Thanks,
 
Paul
 
 
-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of Michael
Steele
Sent: 05 May 2003 19:16
To: 'Paul Pearston'; snort-users () lists sourceforge net
Subject: RE: [Snort-users] ACID Error: Error (p) connecting to DB
 
Paul,
 
Have you configured your acid_conf.php file, and does it reflect your
configuration?
 
 -Michael
 
-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of Paul
Pearston
Sent: Monday, May 05, 2003 8:54 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] ACID Error: Error (p) connecting to DB
 
Hi,
I get the following error when I attempted to access the ACID Console
(https://localhost/acid/index.html) for the first time:
 
 
Warning: Client does not support authentication protocol requested by
server. Consider upgrading MySQL client in
/var/www/html/adodb/drivers/adodb-mysql.inc.php on line 229
Error (p)connecting to DB : snort@localhost:3306 
Check the DB connection variables in acid_conf.php 
               = $alert_dbname   : MySQL database name where the alerts
are stored 
               = $alert_host     : host where the database is stored
               = $alert_port     : port where the database is stored
               = $alert_user     : username into the database
               = $alert_password : password for the username
              
Database ERROR:Client does not support authentication protocol requested
by server. Consider upgrading MySQL client
I can connect to the snort db locally within mysql, however, not from
ACID. Any assistance would be greatly appreciated?
 
Thanks,
 
Paul