[BlueOnyx:16498] Re: 5208R - Adding mysql Database to a site

[Dirk Estenfeld]

Michael,

ok my problem looks maybe a little bit different to Chris.
Let me try to explain it again.

I create a new vsite.
In the next step I go to services -> web and tick the checkbox for mysql. 
I changed nothing else and safe.

What do we have now in mysql.

- A new mysql database: vsite_z4MDeUB_db
- A new mysql user: vsite_z4MDeUB

But if the user tries to connect the database it is not working:

mysql -h localhost -u vsite_z4MDeUB -paUGFY9Q vsite_z4MDeUB_db
ERROR 1044 (42000): Access denied for user 'vsite_z4MDeUB'@'localhost' to database 'vsite_z4MDeUB_db'

Why?
Let us have a look in the priviledges for database vsite_z4MDeUB_db


Benutzer Host	Typ	Rechte	GRANT	Aktion
root  127.0.0.1 global  ALL PRIVILEGES   Ja  Rechte ändern Rechte ändern 
root  localhost global  ALL PRIVILEGES   Ja  Rechte ändern Rechte ändern 
root  localhost.localdomain global  ALL PRIVILEGES   Ja  Rechte ändern Rechte ändern

What is missing?
vsite_z4MDeUB is missing :(

So I go to rights and add the new database with all privileges  (yes I also think like Chris that it should be possible that a user can have all privileges for his database) to the user.
mysqadmin reload

And now you see:

---
mysql -h localhost -u vsite_z4MDeUB -paUGFY9Q vsite_z4MDeUB_db
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 160
Server version: 5.1.73 Source distribution

Copyright (c) 2000, 2013, Oracle and/or its affiliates. All rights reserved.

Oracle is a registered trademark of Oracle Corporation and/or its
affiliates. Other names may be trademarks of their respective
owners.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

mysql>
---

It is working now.

So my issue is not insufficient rights. My problem is _no_ rights.

I have tested this for two different 520R installations and both are acting in the same way (db -> ok, user -> ok, rights -> false).

Michael you are welcome to have a look at one of this two servers if you want.

Best regards,
Dirk


-----------------------------------------------
Black Point Arts Internet Solutions GmbH - Hanauer Landstrasse 423a - 60314 Frankfurt


-----------------------------------------------
-----Ursprüngliche Nachricht-----
Von: blueonyx-bounces at mail.blueonyx.it [mailto:blueonyx-bounces at mail.blueonyx.it] Im Auftrag von Michael Stauber
Gesendet: Mittwoch, 19. November 2014 20:04
An: BlueOnyx General Mailing List
Betreff: [BlueOnyx:16489] Re: 5208R - Adding mysql Database to a site

Hi Dirk, hi Chris,

> Yes, we have verified this behavior with our production systems.   The 
> problem seems to be that the database user is created with incomplete 
> permissions.   The user should have all permissions over the database 
> that is created.

Ok, please help me out here. As I said earlier:

The MySQL-user is created with the privileges that are defined under
"Server Management" / "Network Services" / "MySQL-Settings".

Let's take a look at the demo to get a common ground on this:

http://demo.blueonyx.it:444/mysql/mysqlconfig
Login: 		admin
Password 	demo123.

(Password with a dot at the end)

So a MySQL user of a Vsite gets all data-privilegs except FILE and half
of the structure privileges. For me that then seems to work fine.

So in phpMyAdmin (if we login as a Vsite user) we can access that table
just fine in phpMyAdmin:

http://demo.blueonyx.it:444/phpmyadmin/site?group=site1

If you use that URL, the phpMyAdmin-login is done with the
MySQL-Username and MySQL-password of that Vsite's database-user. Which
was created with the "stock" privileges as shown in the first URL.

So ... I understand that you are having problems and I'm willing to do
whatever is necessary to fix this. But as you can see for yourself in
the demo: For me it just works the way it's supposed to work.

What am I missing?

Which privileges are *not* granted in your usage cases, but *need* to be
granted to make it work for you?

-- 
With best regards

Michael Stauber
_______________________________________________
Blueonyx mailing list
Blueonyx at mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx