[Halld-offline] [EXTERNAL] Re: Vulnerability on halldweb

[Richard Jones]

Maybe related to this, for the first time this morning I am seeing a new
error when trying to run hdgeant4 at UConn.


> Error [1040]: in [bool MySQLDataProvider::Connect(MySQLConnectionInfo)]
> mysql_real_connect() failed:
> Error 2003 (Can't connect to MySQL server on 'hallddb.jlab.org' (110))
>
> terminate called after throwing an instance of 'std::logic_error'
>   what():  CONNECTION ERROR.
> Aborted (core dumped)
> [jonesrt at gluey test]$
>

Are halldweb and hallddb the same server? Or is hallddb offline for similar
reasons?
-Richard Jones

On Wed, Aug 21, 2024 at 10:29 AM Richard Jones <rjones30 at gmail.com> wrote:

> Maybe related to this, for the first time this morning I am seeing a new
> error when trying to run hdgeant4 at UConn.
>
>
>> Error [1040]: in [bool MySQLDataProvider::Connect(MySQLConnectionInfo)]
>> mysql_real_connect() failed:
>> Error 2003 (Can't connect to MySQL server on 'hallddb.jlab.org' (110))
>>
>> terminate called after throwing an instance of 'std::logic_error'
>>   what():  CONNECTION ERROR.
>> Aborted (core dumped)
>> [jonesrt at gluey test]$
>>
>
> Are halldweb and hallddb the same server? Or is hallddb offline for
> similar reasons?
> -Richard Jones
>
> On Tue, Aug 20, 2024 at 3:18 PM Alexander Austregesilo via Halld-offline <
> halld-offline at jlab.org> wrote:
>
>> *Message sent from a system outside of UConn.*
>>
>>
>> Dear Colleagues,
>>
>> A vulnerability was found in httpd on our externally facing web server
>> halldweb, which is still running end-of-life RHEL7. This issue will be
>> fixed for RHEL9. Until the server can be rebuilt and properly tested,
>> halldweb will be moved behind an external proxy.
>>
>> The external DNS will resolve the proxy and the connections should be
>> proxied to the current server.  This alleviates, for the time being,
>> external access to the vulnerability. The expectation is that this would
>> not affect the user access from offsite at all, but making any change
>> can potentially cause issues.
>>
>> The change is scheduled for 3:30pm today. Please let me know if you
>> experience any issues. Apparently, we can easily revert this change.
>>
>> Best regards,
>>
>> Alex
>>
>> --
>> Alexander Austregesilo
>>
>> Staff Scientist - Experimental Nuclear Physics
>> Thomas Jefferson National Accelerator Facility
>> Newport News, VA
>> aaustreg at jlab.org
>> (757) 269-6982
>>
>> _______________________________________________
>> Halld-offline mailing list
>> Halld-offline at jlab.org
>>
>> https://urldefense.proofpoint.com/v2/url?u=https-3A__nam10.safelinks.protection.outlook.com_-3Furl-3Dhttps-253A-252F-252Fmailman.jlab.org-252Fmailman-252Flistinfo-252Fhalld-2Doffline-26data-3D05-257C02-257Crichard.t.jones-2540uconn.edu-257Ce6bbb70c824746e665c108dcc14ce24b-257C17f1a87e2a254eaab9df9d439034b080-257C0-257C0-257C638597783166572634-257CUnknown-257CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0-253D-257C0-257C-257C-257C-26sdata-3DexQY7o3NzgH3gSNKB7zG9FCNfisOEEVc-252BeBahlsU1bs-253D-26reserved-3D0&d=DwIFaQ&c=CJqEzB1piLOyyvZjb8YUQw&r=Te_hCR4EUlJ6iCDYLJ8Viv2aDOR7D9ZZMoBAvf2H0M4&m=KbRuPRA0sR_YQoNEguu_SLhPCVfFbsSZND_I_IpdBq56QpTa0Z6sswC6xD6AQQH3&s=U8GcZn4p4b0XTqdM7d772hrv_PKGD1Jb3l0pkWreOZ0&e= 
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mailman.jlab.org/pipermail/halld-offline/attachments/20240821/7365bbc2/attachment-0001.html>