Password on the command line interface can be insecure

Question

Password on the command line interface can be insecure

mmenozzi opened this issue 11 years ago · 14 comments

With MySQL 5.6 every run of automysqlbackup will generate the following warning (and potentially an error email):

Warning: Using a password on the command line interface can be insecure.

This is because automysqlbackup uses username and password directly on the mysql command for the connection.

Here the problem has been solved:
http://www.redeo.nl/2013/11/automysqlbackup-warning-using-password-command-line-interface-can-insecure/

But I don't know if this is the cleanest solution.

Answer 1 · 2014-10-14T10:35:44.000Z

Also applied the linked fix, can you address this issue on next release ?

Answer 2 · 2014-12-30T18:06:40.000Z

Applied the linked fix on a large professional scale. Would greatly appreciate incorporation into next release.

Answer 3 · 2015-02-26T09:57:17.000Z

Or perhaps take the advice and not show passwords on the command line.

Answer 4 · 2015-07-02T11:24:08.000Z

hi, fixed in https://github.com/ppadial/autoMySQLBackup master, cause it seems to be outdated

Answer 5 · 2016-08-29T18:56:45.000Z

I'm a bit late to the party, but for reference, it looks to me this is a better way to deal with this problem no? :
msilvoso@3f4a557

Answer 6 · 2017-04-10T04:36:28.000Z

@kronos-pbrideau That looks like a better way. See also http://stackoverflow.com/a/22933056/552983

Answer 7 · 2017-06-28T15:40:16.000Z

I can't believe this still isn't fixed. Just upgraded to ubuntu server 16.04 and started getting daily emails full of warnings. The solution at redeo.nl does not work for me. Running v3.0-rc6 currently.

Answer 8 · 2017-06-29T19:39:42.000Z

Also having this issue on Ubuntu 17.04 with automysqlbackup 2.5 and MySQL 5.7.

Answer 9 · 2017-07-04T21:50:28.000Z

For me the issue is fixed on Ubuntu 16.04.2 LTS
Package: automysqlbackup
Version: 2.6+debian.4-1

Answer 10 · 2018-04-10T06:59:32.000Z

Not sure why nobody is pointing this out here, but the only real solution to this problem is adding an option to use a defaults-file/my.cnf for auth rather than --password.

Obscure wrappers and greps also do not solve the problem that mysqldump is extting with 1 instead of 0.

Answer 11 · 2019-09-11T11:40:33.000Z

please help
how to solve below error

WARNING

Errors reported during AutoMySQLBackup execution.. Backup failed
Error log below..
mysql: [Warning] Using a password on the command line interface can be insecure.

Answer 12 · 2019-11-07T00:46:55.000Z

I have the same problem

Answer 13 · 2022-01-14T12:52:14.000Z

Hello anyone resolves this issue?

Answer 14 · 2023-03-21T19:35:33.000Z

@rcruz And here we are - 2023 ... any hope for solving this problem? I use MySQL v 8 ... would love to get this program up and working on all cylinders.

Thank you,
☺
Mike Sims