Re: [cobalt-users] phpMyAdmin

["Davide Crudo" <dcrudo@xxxxxxxxxxxxx>]

You can find the options to set for advanced authentication in the user
manual as following:

**********************
Using Advanced Authentication:

  1.. phpMyAdmin needs a stduser that has only the SELECT privilege on the
mysql.db (Db,user,Select_priv) & mysql.user (user,Select_priv) tables. You
must specify the details for the stduser in the config.inc.php3 file under
the $cfgServers[n]['stduser'] & $cfgServers[n]['stdpass'] settings. To
create the control account:
     GRANT USAGE ON mysql.* TO 'stduser'@localhost IDENTIFIED BY 'password';
     GRANT SELECT ON mysql.user TO 'stduser'@localhost;
     GRANT SELECT ON mysql.db TO 'stduser'@localhost;
  2.. Then each of the true users should be granted of a set of privileges
on a set of perticular databases but shouldn't have any global privileges.
For example, to grant the user real_user with all privileges on the database
user_base:
     GRANT ALL PRIVILEGES ON user_base TO 'real_user'@localhost IDENTIFIED
BY 'real_password';
  What the user may now do is controlled entirely by the MySQL user
management system.
**********************

you will also have to modify the config.inc.php file and tell the server to
use advance authentication... you won't
need a root user:

$cfgServers[1]['host']          = 'localhost'; // MySQL hostname
$cfgServers[1]['port']          = '';          // MySQL port - leave blank
for default port
$cfgServers[1]['socket']        = '';          // Path to the socket - leave
blank for default socket
$cfgServers[1]['connect_type']  = 'tcp';       // How to connect to MySQL
server ('tcp' or 'socket')
$cfgServers[1]['stduser']       = 'stduser';          // MySQL standard user
settings (this user must have read-only
$cfgServers[1]['stdpass']       = 'real_password';          //   access to
the "mysql/user" and "mysql/db" tables)
$cfgServers[1]['adv_auth']      = True;       // Use advanced
authentication?
$cfgServers[1]['user']          = '';      // MySQL user
$cfgServers[1]['password']      = '';   // MySQL password (only needed with
basic auth)
$cfgServers[1]['only_db']       = '';          // If set to a db-name, only
this db is displayed at left frame
                                               // It may also be an array of
db-names
$cfgServers[1]['verbose']       = '';          // Verbose name for this
host - leave blank to show the hostname
$cfgServers[1]['bookmarkdb']    = '';          // Bookmark db - leave blank
for no bookmark support
$cfgServers[1]['bookmarktable'] = '';          // Bookmark table - leave
blank for no bookmark support


for security, change the 'stduser' and 'real_password' into something of
your choice.

Bugs found using advanced authentication:
+++++++++++++++++++++++++++

1) when setting privileges for a user on a database, I suggest you to set it
manually with the following
sql command:

grant all privileges on DATABASE to USER;

in fact, if you use the web interface, you will also give to the user the
power to create new public databases.
...I've noticed that databases created by users, will be then available to
everyone...

2) Changing the password of a user, will return an error of table not found
( 'table User not found') ...this is
a bug since the name of the user table is 'user' and not 'User' (note the
capital 'U')




----- Original Message -----
From: "Mike Fisher" <m.fisher@xxxxxxxxxxxxxxxxxxxxxxxxxx>
To: <cobalt-users@xxxxxxxxxxxxxxx>
Sent: Wednesday, October 31, 2001 7:51 AM
Subject: [cobalt-users] phpMyAdmin


> Hi *,
>
> what must i do to add phpMyAdmin to all new sites i create, so all my
users
> have
> access to their own database, and phpMyAdmin is installed once ?
>
> On 27.10.2001 P. Batenburg give a help, but i miss , what i must do
> in /etc/httpd/conf/srm.conf ???
> Where must i install phpMyAdmin ? (/home/phpMyAdmin ?)
> How can i set the auth option of phpMyAdmin ?
>
> Thanks
> Mike Fisher
>
>
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To Subscribe or Unsubscribe, please go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
>