Re-5: [stunnel-users] Problem with mysql

lmarcilly at aressi.fr lmarcilly at aressi.fr
Thu Jul 21 10:00:12 CEST 2005


Sorry, i doesn't look in the good stunnel.log, there is a SIGTERM because i stop the box!

So here is my stunnel.log :

2005.07.21 11:48:25 LOG5[230:1]: stunnel 4.11 on i686-pc-linux-gnu UCONTEXT+POLL+IPv4 with OpenSSL 0.9.7g 11 Apr 2005
2005.07.21 11:48:26 LOG7[230:1]: RAND_status claims sufficient entropy for the PRNG
2005.07.21 11:48:26 LOG6[230:1]: PRNG seeded successfully
2005.07.21 11:48:26 LOG6[230:1]: file ulimit = 1024 (can be changed with 'ulimit -n')
2005.07.21 11:48:26 LOG6[230:1]: poll() used - no FD_SETSIZE limit for file descriptors
2005.07.21 11:48:26 LOG5[230:1]: 500 clients allowed
2005.07.21 11:48:26 LOG7[230:1]: FD 4 in non-blocking mode
2005.07.21 11:48:26 LOG7[230:1]: FD 5 in non-blocking mode
2005.07.21 11:48:26 LOG7[230:1]: FD 6 in non-blocking mode
2005.07.21 11:48:26 LOG7[230:1]: SO_REUSEADDR option set on accept socket
2005.07.21 11:48:26 LOG7[230:1]: mysql bound to 127.0.0.1:3306
2005.07.21 11:48:26 LOG7[231:1]: Created pid file /stunnel.pid

So it seems to run properly but telnet 192.168.1.121 3306 ot telnet localhost 3306 doesn't work, i get a time out!

I will give you more informations :

stunnel-4.11 on an lfs system (Kernel 2.4.30 with the bridge patch and the SSP patch)

gcc -v :

Reading specs from /home/lmarcilly/lfs_install/build/usr/bin/../lib/gcc-lib/i686-pc-linux-gnu/3.3.3/specs
Configured with: ../gcc-3.3.3/configure --prefix=/usr --enable-shared --enable-threads=posix --enable-__cxa_atexit --enable-clocale=gnu --enable-languages=c,c++ --disable-nls
Thread model: posix
gcc version 3.3.3

When compiling :

./configure --prefix=/usr --disable-libwrap
make
make install

stunnel.conf :

chroot = /usr/var/stunnel/
pid = /stunnel.pid
socket = l:TCP_NODELAY=1
socket = r:TCP_NODELAY=1
debug = 7
output = /var/log/stunnel.log
client = yes
[mysql]
accept  = localhost:3306
connect = 192.168.1.104:3307

I've also tried with accept = 3306 and accept = 127.0.0.1:3306 but with no success...

I'm sorry but i have no idea and i don't know how resolve my problem so please help me...

Thanks in advance!

lm.

-------- Original Message --------
Subject: Re-4: [stunnel-users] Problem with mysql (21-juil.-2005 9:26)
From:    lmarcilly at aressi.fr
To:      lmarcilly at aressi.fr

> I try :
> 
> mysql -h 192.168.1.121 --protocol=TCP -u user --password=xxx
> 
> and i get this message :
> 
> Can't connect to MySQL server on '192.168.1.121'
> 
> I also try :
> 
> telnet 192.168.1.121 3306
> 
> and i get :
> 
> telnet : Unable to connect to remote host : Connection timed out
> 
> Here is my stunnel.log : 
> 
> 2005.07.21 11:13:07 LOG5[2462:1]: stunnel 4.11 on i686-pc-linux-gnu 
> UCONTEXT+POLL+IPv4 with OpenSSL 0.9.7g 11 Apr 2005
> 2005.07.21 11:13:07 LOG7[2462:1]: Snagged 64 random bytes from /root/.rnd
> 2005.07.21 11:13:07 LOG7[2462:1]: Wrote 1024 new random bytes to /root/.rnd
> 2005.07.21 11:13:07 LOG7[2462:1]: RAND_status claims sufficient entropy for 
> the PRNG
> 2005.07.21 11:13:07 LOG6[2462:1]: PRNG seeded successfully
> 2005.07.21 11:13:07 LOG6[2462:1]: file ulimit = 1024 (can be changed with '
> ulimit -n')
> 2005.07.21 11:13:07 LOG6[2462:1]: poll() used - no FD_SETSIZE limit for 
> file descriptors
> 2005.07.21 11:13:07 LOG5[2462:1]: 500 clients allowed
> 2005.07.21 11:13:07 LOG7[2462:1]: FD 4 in non-blocking mode
> 2005.07.21 11:13:07 LOG7[2462:1]: FD 5 in non-blocking mode
> 2005.07.21 11:13:07 LOG7[2462:1]: FD 6 in non-blocking mode
> 2005.07.21 11:13:07 LOG7[2462:1]: SO_REUSEADDR option set on accept socket
> 2005.07.21 11:13:07 LOG7[2462:1]: mysql bound to 127.0.0.1:3306
> 2005.07.21 11:13:07 LOG7[2463:1]: Created pid file /stunnel.pid
> 2005.07.21 11:15:58 LOG5[2463:0]: Received signal 15; terminating
> 2005.07.21 11:15:58 LOG7[2463:0]: removing pid file /stunnel.pid
> 
> And i think the last 2 lines are not normal!!
> But how can i see from where come the SIGTERM ?? There is always a stunnel 
> process but it doesn't work properly...
> 
> Any idea?
> 
> -------- Original Message --------
> Subject: Re: Re-2: [stunnel-users] Problem with mysql (21-juil.-2005 9:13)
> From:    bri at stunnel.org
> To:      lmarcilly at aressi.fr
> 
> > 
> > 
> > > How to do this? I try with :
> > > mysql --port=3306 --protocol=TCP -u user --password=xxx
> > > 
> > > but it won't work...
> > > 
> > > When i try telnet localhost 3306, i can't establish connection but i can on 
> > > 
> > > my windows box... I also try to analyse traffic with tcpdump and there is 
> > > no packet when i try with stunnel...
> > 
> > I've found in the past that mysql when pointing to localhost has
> > used the socket in spite of the arguments you put on the command line.
> > 
> > Try pointing to the ethernet IP address instead of 127.0.0.1 and
> > see if it's happy then.  You never know...
> > 
> > -- 
> > Brian Hatch                  "I've decided I'm not keen on
> >    Systems and                preterm labour."
> >    Security Engineer         "I'll write that down in our
> > http://www.ifokr.org/bri/     birthing plan..."
> >                              --Bree and Bri, in L&D.
> > Every message PGP signed
> > 
> 
> 
> To: bri at stunnel.org
> Cc: Michal.Trojnara at mobi-com.net
>     stunnel-users at mirt.net
> 
> 
> 
> _______________________________________________
> stunnel-users mailing list
> stunnel-users at mirt.net
> http://stunnel.mirt.net/mailman/listinfo/stunnel-users


To: lmarcilly at aressi.fr
    bri at stunnel.org
Cc: stunnel-users at mirt.net






More information about the stunnel-users mailing list