Re: Please reply to user and bugs@ ... list

Sinisa Milivojevic wrote:
> 
> ------------------------------------------------------------------------
> 
> Subject:
> Problems with accessing mysql with/without ssl.
> From:
> Arkadiusz Miskiewicz <[email protected]>
> Date:
> Tue, 4 Nov 2003 14:13:48 +0100
> To:
> [email protected]
> 
> 
> I have some db - ''somedb".
> 
> GRANT ALL PRIVILEGES ON somedb.* TO 'user'@'%' identified by 'pass_1'
> GRANT ALL PRIVILEGES ON somedb.* TO 'user'@'1.2.3.%' identified by 'pass_2'
> 
> and now I can connect to database only from  '1.2.3.%'  with 'pass_2'.
> 
> Weird but logical way would be if I'm matching 1.2.3.% then check for pass_2 
> and if not then check for pass_1. Same applies to ,,REQUIRE SSL'' rules.

   Please refer to manual:
   http://www.mysql.com/doc/en/Request_access.html.
   There is good decription how setup privileges using 'host' table.
   Below is exapmle how you can setup connections from different hosts:

   GRANT ALL PRIVILEGES ON somedb.* TO 'user'@'%' identified by 'pass_1';
   GRANT ALL PRIVILEGES ON somedb.* TO 'user'@'1.2.3.%' identified by
'pass_2';
   use mysql;

   /* We need only one record in db table with epmty 'host' field */
   delete from db where db='somedb' and user='user' and host= '1.2.3.%';
   update db set host= '' where db='somedb' and user= 'user';

   insert into host values ('1.2.3.%', 'somedb', 'Y', 'Y', 'Y', 'Y', 
'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y');
   insert into host values ('%', 'somedb', 'Y', 'Y', 'Y', 'Y', 'Y', 'Y', 
'Y', 'Y', 'Y', 'Y', 'Y', 'Y');
   flush privileges;

   So now you can setup connenction using user='user',host='%' and
   pass= 'pass_1' to 'somedb' or user='user',host='1.2.3.%' and
   pass= 'pass_2' to 'somedb'.
> 
> For example now I don't see a way to give some user permission to connect to 
> my database from local network without using SSL and from other networks with 
> SSL only... something like
> 
> GRANT ALL PRIVILEGES ON somedb.* TO 'user'@'%' identified by 'pass_1' REQUIRE 
> SSL
> GRANT ALL PRIVILEGES ON somedb.* TO 'user'@'192.168.0.%' identified by 
> 'pass_1'

   The same for ssl connections.
> 
> Also plase look at http://lists.mysql.com/bugs/14331. The issue is still there 
> in 4.0.16.

   Please refer to manual:
   http://www.mysql.com/doc/en/SSL_options.html.
   About possibility of only crypted connection without key/cert
   authentification. I think we will add this feature in next releases.

Regards,
Gluh


-- 
MySQL Bugs Mailing List
For list archives: http://lists.mysql.com/bugs
To unsubscribe:    http://lists.mysql.com/[email protected]