Uploaded image for project: 'Percona Toolkit'
  1. Percona Toolkit
  2. PT-1800

PTDEBUG=1 exposes passwords

Details

    • Improvement
    • Status: Open
    • Medium
    • Resolution: Unresolved
    • 3.1.0
    • 3.NEXT
    • None
    • Yes
    • 1

    Description

      Tried this with pt-online-schema-change version 3.1.0.

      If this is an expected behavior, at least provide a warning in each toolkit's Environment section: https://www.percona.com/doc/percona-toolkit/LATEST/pt-online-schema-change.html#environment

      However, fixing this by masking the password would be better in the long run.

      # Arguments: _[--user=master_checksum]_ _[--password=master_checksum]_ _[--alter]_ _[FORCE]_ _[--slave-user=slave_checksum]_ _[--slave-password=slave_checksum]_ _[D=test,t=sbtest1]_ _[--recursion-method=processlist]_ _[--no-check-replication-filters]_ _[--no-check-alter]_ _[--no-check-plan]_ _[--chunk-index=PRIMARY]_ _[--no-version-check]_ _[--execute]_
      # OptionParser:376 1004 Short help: Prompt for a password when connecting to MySQL
      # OptionParser:349 1004 =item --password
      # OptionParser:349 1004 =item --slave-password
      # OptionParser:376 1004 Short help: Sets the password to be used to connect to the slaves
      # OptionParser:416 1004 Parsing opt spec: group => default spec => ask-pass desc => Prompt for a password when connecting to MySQL attributes => HASH(0x2cd5df8)
      # OptionParser:416 1004 Parsing opt spec: group => default spec => password|p=s desc => Password to use when connecting attributes => HASH(0x2cdaa00)
      # OptionParser:455 1004 password type: s
      # OptionParser:416 1004 Parsing opt spec: group => default spec => slave-password=s desc => Sets the password to be used to connect to the slaves attributes => HASH(0x2cdb360)
      # OptionParser:455 1004 slave-password type: s
      # DSNParser:2153 1004 DSN option: copy=1, dsn=password, desc=Password to use when connecting, key=p
      # OptionParser:605 1004 Got option password = master_checksum
      # OptionParser:605 1004 Got option slave-password = slave_checksum
      # OptionParser:840 1004 Nothing to validate for option password type s value master_checksum
      # OptionParser:840 1004 Nothing to validate for option slave-password type s value slave_checksum

      Attachments

        Issue Links

          Activity

            People

              sveta.smirnova Sveta Smirnova
              jericho.rivera Jericho Rivera (Inactive)
              Votes:
              1 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

                Created:
                Updated:

                Smart Checklist