Comments on: MySQL: “Access denied for user ‘debian-sys-maint’@'localhost’”

By: Debian – Can’t Stop MySQL; Permissions? | Click & Find Answer !

Sun, 21 Apr 2013 09:43:08 +0000

[...] the fix and this is the reasoning behind it, if you’re [...]

By: walid karray

walid karray — Tue, 26 Feb 2013 08:56:33 +0000

Thank a lot

By: Andy

Andy — Tue, 15 Jan 2013 10:40:38 +0000

Nice one, thanks. Andy (UK)

By: Fail to stop mysql (Unable to lock ./ibdata1, error: 11) video

Fail to stop mysql (Unable to lock ./ibdata1, error: 11) video — Wed, 09 Jan 2013 02:35:58 +0000

[...] found a solution to this problem on this page, but I have to log in as a root user to do so, that I can’t do. I guess the two problems are [...]

By: hontvari

hontvari — Tue, 27 Mar 2012 13:14:52 +0000

It seems the debian-sys-maint user does need more privileges then shutdown and select, otherwise it cannot upgrade the built-in mysql table when needed. The Ubuntu package adds every privilege, even GRANT:
show grants for ‘debian-sys-maint’@'localhost’;
Result:
GRANT ALL PRIVILEGES ON *.* TO ‘debian-sys-maint’@'localhost’ IDENTIFIED BY PASSWORD ‘xxx’ WITH GRANT OPTION

By: mas.aby

mas.aby — Wed, 01 Feb 2012 02:35:59 +0000

thanks, it’s very usefull

By: linux cheats | dp

linux cheats | dp — Sun, 15 Jan 2012 18:40:43 +0000

[...] mirzmaster.wordpress.com [...]

By: Eric

Eric — Fri, 18 Nov 2011 21:07:36 +0000

Here’s the bash script I ended up with.
It revokes extraneous privs for debian-sys-maint user, grants only SHUTDOWN and SELECT for mysql.*, then updates the /etc/mysql/debian.cnf script with the same password so that start/stop/restart work correctly from /etc/init.d/mysql.

DEBMAINTPASSWORD=’YOUR_PASSWORD_GOES_HERE’

# tighten restrictions on debian-sys-maint user. Deny all privs.
mysql -e “REVOKE ALL PRIVILEGES ON *.* FROM ‘debian-sys-maint’@'localhost’;”
# grant only SHUTDOWN (and SELECT on mysql.user because it does a SELECT sanity check on startup) and fix password by copying from /etc/mysql/debian.cnf
mysql -e “GRANT SHUTDOWN ON *.* TO ‘debian-sys-maint’@'localhost’ identified by ‘$DEBMAINTPASSWORD’;”
mysql -e “GRANT SELECT ON mysql.* TO ‘debian-sys-maint’@'localhost’;”

# update debian mysql conf file (which stores the maintenance password used by the debian start/stop maintenance scripts) with new password
tmpfile=/etc/mysql/debian.cnf.new
cat /etc/mysql/debian.cnf |sed “s/$password\ \=\ $$.*$/\1$DEBMAINTPASSWORD/g”>$tmpfile
if [ -s $tmpfile ];then
cat $tmpfile>/etc/mysql/debian.cnf
rm -f /$tmpfile
fi

By: Edan

Edan — Mon, 31 Oct 2011 07:22:38 +0000

Just finished reinstalling my system and copied my old mysql files from the old disk when i encountered this problem.

Thanks for the great simple solution for the problem

By: Ether

Ether — Thu, 13 Oct 2011 15:24:44 +0000

Remember, that if you running MySQL as slave, and you replicate mysql DB, you should use debian-sys-maint user’s password from master server. Spend half a day to understand that

By: tabunon

tabunon — Wed, 06 Oct 2010 14:10:03 +0000

I ran to a similar problem and the solution simply works perfect.

Cheers!

By: abraham

abraham — Mon, 23 Aug 2010 21:58:39 +0000

excelent

By: RedScourge

RedScourge — Mon, 22 Mar 2010 16:52:16 +0000

You do NOT need to grant all permissions, this is a bad habit to get into from a security standpoint.

All you need to grant is this (as root or whoever):

GRANT SHUTDOWN ON *.* TO ‘debian-sys-maint’@'localhost’;
GRANT SELECT ON `mysql`.`user` TO ‘debian-sys-maint’@'localhost’;

Because it needs to shutdown/startup, and does a test select from the users table as a sanity check to ensure the root user exists. This select is usually done by /usr/share/mysql/debian-start.inc.sh which is loaded by /etc/mysql/debian-start

By: PalaDolphin

PalaDolphin — Sat, 13 Mar 2010 15:05:03 +0000

This did not make the error go away. It did, however, add debian-sys-maint user to my the Privileges list.

By: Rene Madsen

Rene Madsen — Wed, 30 Dec 2009 00:36:31 +0000

Perfect solution, now we can use the Mysql again.

neo@thematrix:~$ mysql -u root -p
Issue the GRANT command now to grant those permissions:

mysql> GRANT ALL PRIVILEGES ON *.* TO ‘debian-sys-maint’@'localhost’ IDENTIFIED BY ‘n4aSHUP04s1J32X5′;

By: Sohail Mirza

Sohail Mirza — Fri, 16 Oct 2009 15:57:27 +0000

In my research of the solution, I can’t say I did come across a bug filed for this issue.

By: Jere

Jere — Fri, 16 Oct 2009 15:47:43 +0000

I see this is an older post, but just ran into this, myself. Reseting the debian-sys-maint password in mysql to match the debian.cnf file takes care of it – but do you know if there is a bug filed against this?

No other mysql passwords are reset during updates – so this seems odd to me.

By: Oogliby

Oogliby — Wed, 11 Feb 2009 12:44:11 +0000

Right tf on!