Access denied when accessing database, able to connect successfully manually - Error 1045

[edgariscoding]

I've been able to fix a few issues with my PhotoPrism installation, it seems like this is the last issue I have. The previous issue was due to me accidentally using uid and gid instead of PHOTOPRISM_UID and PHOTOPRISM_GID since I had an old docker-compose file. I'm using a custom UID and GID because I need them to access an NFS share that I've mounted as a volume to store my originals and import folders.

These errors are now popping up, after the initial import and index completed.

I've verified that PHOTOPRISM_DATABASE_PASSWORD and MYSQL_PASSWORD match, same for the user and database name.

A few things to note: There's something wonky with my photoprism_app container, when I access the console it says that I don't have a username set. If I run the whoami command it will return the custom UID that I set in the docker-compose but will say that it cannot find the name. If I attempt to connect to mysql on photoprism_db from photoprism_app without specifying a username it will return an error. If I specify the username as photoprism the connection succeeds. I'm using the MYSQL password in the docker-compose file.

If the connection succeeds when issuing the username explicitly then how come it's failing in the logs?

PhotoPrism log snippet:

2021-11-03 13:29:13 INFO index: updating covers
2021-11-03 13:29:13 INFO index: updating counts
2021-11-03 13:29:12 WARN share: Error 1045: Access denied for user 'photoprism'@'172.18.0.2' (using password: YES)
2021-11-03 13:29:12 WARN sync: Error 1045: Access denied for user 'photoprism'@'172.18.0.2' (using password: YES)
2021-11-03 13:29:12 ERRO faces: markers: Error 1045: Access denied for user 'photoprism'@'172.18.0.2' (using password: YES) (purge orphans) (remove orphan markers)
2021-11-03 13:14:14 INFO index: updating covers
2021-11-03 13:14:13 INFO index: updating counts
2021-11-03 13:14:13 INFO metadata: optimized 1 photos
2021-11-03 13:14:12 WARN share: Error 1045: Access denied for user 'photoprism'@'172.18.0.2' (using password: YES)
2021-11-03 13:14:12 ERRO faces: markers: Error 1045: Access denied for user 'photoprism'@'172.18.0.2' (using password: YES) (purge orphans) (remove orphan markers)
2021-11-03 12:59:17 INFO index: updating covers
2021-11-03 12:59:17 INFO index: updating counts

PhotoPrism App Container (IP: 172.18.0.2):

I have no name!@d2ec9b825444:/photoprism$ mysql -h 172.18.0.3 -P 3306 -p photoprism
Enter password: 
ERROR 1045 (28000): Access denied for user 'UNKNOWN_USER'@'172.18.0.2' (using password: YES)

I have no name!@d2ec9b825444:/photoprism$ whoami
whoami: cannot find name for user ID 5001

I have no name!@d2ec9b825444:/photoprism$ mysql -h 172.18.0.3 -P 3306 -u photoprism -p photoprism
Enter password: 

Reading table information for completion of table and column names
You can turn off this feature to get a quicker startup with -A

Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is 204
Server version: 10.5.12-MariaDB-1:10.5.12+maria~focal mariadb.org binary distribution

Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MariaDB [photoprism]> 

[edgariscoding]

I was able to fix this by accessing the console for the photoprism_app container and changing the UID and GID of the photoprism user from 1000:1000 to my custom UID and GID.

To assign a new UID to user called photoprism, enter:

usermod -u 3001 photoprism

To assign a new GID to group called photoprism, enter:

groupmod -g 3001 photoprism

Update ownership for files outside of home dir:

# find / -group 1000 -exec chgrp -h photoprism {} \;
# find / -user 1000 -exec chown -h photoprism {} \;

Then I had to restart my containers and it worked.

[edgariscoding]

Just kidding, the errors started popping up again.

2021-11-03 15:42:08 INFO index: updating counts
2021-11-03 15:42:06 ERRO faces: Error 1045: Access denied for user 'photoprism'@'172.18.0.3' (using password: YES) (resolve ambiguous subjects)
2021-11-03 15:42:06 ERRO markers: Error 1045: Access denied for user 'photoprism'@'172.18.0.3' (using password: YES) (create subjects)
2021-11-03 15:42:06 ERRO markers: Error 1045: Access denied for user 'photoprism'@'172.18.0.3' (using password: YES) (fix references)
2021-11-03 15:42:06 WARN share: Error 1045: Access denied for user 'photoprism'@'172.18.0.3' (using password: YES)
2021-11-03 15:42:06 ERRO faces: markers: Error 1045: Access denied for user 'photoprism'@'172.18.0.3' (using password: YES) (purge orphans) (remove orphan markers)
2021-11-03 15:42:06 WARN sync: Error 1045: Access denied for user 'photoprism'@'172.18.0.3' (using password: YES)
2021-11-03 15:32:23 INFO libx264: transcoding 2021/07/20210714_183356_8BB4FC26.mov to avc
2021-11-03 15:31:51 INFO photos: found 60 results for public:true dist:20 year:0 month:0 quality:3 count:60 offset:120 order:newest merged:true [79.027932ms]

[lastzero]

Permission errors start while it's already running? Strange. File system permissions have nothing to do with mariadb otherwise.