[BlueOnyx:02553] Re: MySQL users

[Colin Jack]

First thing I do is change the MySQL default password on a new BO/BQ install but I noticed that I could log on to PHPMyAdmin with any user name and no password which is less than ideal :( ...

I wondered whether I should have hardened my default install.

Colin


On 2 Oct 2009, at 17:17, Gerald Waugh wrote:

Apologies if this is a real newb question but MySQL in BO and BQ seems to be installed with some default users without passwords:

        User     Host                     Password         Global   privileges
        Any      %                        --               USAGE    No
        Any      localhost                No               USAGE    No
        Any      localhost.localdomain    No               USAGE    No

This seems a bit alarming. Can I safely remove these?

mysql> select User,Host from mysql.user;
+------+-----------------------+
| User | Host                  |
+------+-----------------------+
| root | 127.0.0.1             |
| root | localhost             |
| root | localhost.localdomain |
+------+-----------------------+
3 rows in set (0.00 sec)
the user is root, and that is because on a default install there is no password set.

Gerald
_______________________________________________
Blueonyx mailing list
Blueonyx at blueonyx.it<mailto:Blueonyx at blueonyx.it>
http://www.blueonyx.it/mailman/listinfo/blueonyx

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.blueonyx.it/pipermail/blueonyx/attachments/20091003/b178b45f/attachment.html>