# Lab-mysql server: getting access errors

**URL:** <https://discuss.elastic.co/t/lab-mysql-server-getting-access-errors/263183>\
**Category:** Elastic Training\
**Tags:** docker\
**Created:** [February 4, 2021, 1:03am UTC](https://discuss.elastic.co/t/lab-mysql-server-getting-access-errors/263183 "2021-02-04T01:03:15Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Stud21](https://avatars.discourse-cdn.com/v4/letter/s/dfb087/32.png) [@Stud21](https://discuss.elastic.co/u/Stud21)\
**Post date:** [February 4, 2021, 1:03am UTC](https://discuss.elastic.co/t/lab-mysql-server-getting-access-errors/263183/1 "2021-02-04T01:03:16Z")

</div>

listing contents of the file,  
I get the following error:  
2021-02-04T00:42:43.872991Z 0 [Note] mysqld: ready for connections.  
Version: '5.7.31' socket: '/var/lib/mysql/mysql.sock' port: 3306 MySQL Community Server (GPL)  
2021-02-04T00:43:47.614242Z 13 [Note] Got an error reading communication packets  
2021-02-04T00:49:56.236728Z 222 [Note] Access denied for user 'admin'@'114.33.143.92' (using password: YES)  
2021-02-04T00:49:57.833302Z 223 [Note] Access denied for user 'root'@'114.33.143.92' (using password: YES)  
2021-02-04T00:49:59.466615Z 224 [Note] Access denied for user 'root'@'114.33.143.92' (using password: YES)  
2021-02-04T00:50:01.131314Z 225 [Note] Access denied for user 'root'@'114.33.143.92' (using password: YES)  
2021-02-04T00:50:02.851547Z 226 [Note] Access denied for user 'cloudera'@'114.33.143.92' (using password: YES)  
2021-02-04T00:50:04.541418Z 227 [Note] Access denied for user 'root'@'114.33.143.92' (using password: YES)  
2021-02-04T00:50:06.266694Z 228 [Note] Access denied for user 'dbuser'@'114.33.143.92' (using password: YES)  
2021-02-04T00:50:07.920652Z 229 [Note] Access denied for user 'root'@'114.33.143.92' (using password: YES)

How do I fix this.

---

<div class="post-metadata">

**Author:** ![pmusa](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pmusa/32/3498_2.png) [@pmusa](https://discuss.elastic.co/u/pmusa)\
**Post date:** [February 4, 2021, 10:38am UTC](https://discuss.elastic.co/t/lab-mysql-server-getting-access-errors/263183/2 "2021-02-04T10:38:51Z")

</div>

Which course is this?

---

<div class="post-metadata">

**Author:** ![Stud21](https://avatars.discourse-cdn.com/v4/letter/s/dfb087/32.png) [@Stud21](https://discuss.elastic.co/u/Stud21)\
**Post date:** [February 5, 2021, 2:06am UTC](https://discuss.elastic.co/t/lab-mysql-server-getting-access-errors/263183/3 "2021-02-05T02:06:53Z")

</div>

Hi Pablo,  
Not sure which Lab course in the Elastic Observability Engineer course. Probably moved ahead with the Labs now.

Anyway, is there a way I can use/access sudo in the labs so to allow access to the file or change permissions?

Kind regards,

Patrick

---

<div class="post-metadata">

**Author:** ![dinyes](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dinyes/32/42906_2.png) [@dinyes](https://discuss.elastic.co/u/dinyes)\
**Post date:** [February 10, 2021, 2:33pm UTC](https://discuss.elastic.co/t/lab-mysql-server-getting-access-errors/263183/4 "2021-02-10T14:33:50Z")

</div>

If this is the metricbeat modules lab (Lab 2.2) where you set up monitoring of the mysql instance, re-check step 11? That's where you have to set a password for metricbeat to access mysql. A mistype, and metricbeat may try to fall back on other logins it's programmed to attempt. Otherwise, if that IP address isn't the address of your Strigo environment, it may simply be an outside attacker (hence why I'm not pasting mysql's root password here in a public forum). The "cloudera" attempt sort of makes it seem like some bot found your instance. Don't worry, though, it's protected.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 12, 2021, 2:34pm UTC](https://discuss.elastic.co/t/lab-mysql-server-getting-access-errors/263183/5 "2021-03-12T14:34:26Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
