[cobalt-users] RE: mySQL connection to remote computers

["Michael Martin" <michael@xxxxxxxxxxxxxx>]

The mysql docs say to be very careful with this because it is a possible
security hole. However, if your clever you can make it fairly secure. I have
a sql admin helping me with creating a db for a client. He needed to connect
via the mysql gui tool, so I had to grant access from his computer. Here are
some possible commands to do this:

Get into the mysql command line from a shell prompt using the "mysql"
database, "mysql -u root -p mysql". It will ask for a root password.

This command grants superuser rights, consult your docs on what privileges
you want to grant:

mysql> GRANT ALL ON *.* TO user@localhost IDENTIFIED BY 'password' WITH
GRANT OPTION;

Where "user" is the user's name, and 'password' is that user's password. You
can replace "localhost" with the user's IP address if it's static
(user@xxxxxxxx or something), or you can use wildcards with "%". If you want
to allow that user to connect from a specific subnet you would enter
user@xxxxxxx%. You can also use hostnames with or without wildcards,
user@xxxxxxxxxxxxxxx, or user@%.domain.com. If your totally crazy you can
even enter user@%!

The more specific the hostname or address the more secure it is, although
some sysadmins might argue that allowing remote connections at all is
insecure. Hope this helps!

Michael Martin


------------------------------------------------------

From: "Mike Fritsch" <mfritsch@xxxxxxxxxxxx>
To: "Cobalt List" <cobalt-users@xxxxxxxxxxxxxxx>
Date: Thu, 18 May 2000 01:04:27 -0700
charset="iso-8859-1"
Subject: [cobalt-users] mySQL connection to remote computers
Reply-To: cobalt-users@xxxxxxxxxxxxxxx

I have a user who wants privileges on his MySQL database so that he can
connect his computer to it. Anyone see any problems with that? Anyone have
any users who do this?

Thanks