in port forwarding , all you are saying is !!ok, if server1 gets any connection on port 3307 then forward that connection to port 3306 on server2, so essentially the connection on server2 for Mysql is coming from the client on server1 , so the user you are using to connect to server2 from server1 has to have permissions to connect to server2 from server1 ( Note: the user might have permission to connect to server2 from server2 itself, but not from server1). So please add that permissions appropriately on server2 as you told earlier
On server2 GRANT ... TO 'someuser''@'server1' identified by 'password' That would solve it ... You also asked if port forwarded connections are really taken as local > connections??? in this case a connection on server1 was port forwarded to server2 , so server2 does not see this connection as being local... Kishore Jalleda http://kjalleda.googlepages.com/projects On 4/3/06, Bing Du <[EMAIL PROTECTED]> wrote: > > Bing Du wrote: > > > >>Hello everyone, > >> > >>What I'm after is trying to figure out a way to centrally and remotely > >>managing (e.g. on server1) our MySQL servers (server2 is an example) on > >>different machines. Right now, these MySQL servers are all set up to > >> only > >>accept logons from localhost. My questions: > >> > >>1. server1 has to be able to connect to server2 directly via SSH, right? > >>2. On server2, does 'grant ...to [EMAIL PROTECTED] identified by ...' have > >>to be done? > >> > >>I've been looking through the relevent threads regarding how to make port > >>forwarding for MySQL work. I saw one thread mentioned that port > >> forwarded > >>MySQL connection was taken as a local connection. But my own testing > >>cannot agree with that. I'm confused. Here is what I did: > >> > >>On server1: > >> > >>server1% ssh -2 -l myusername -N -L 3307:server2:3306 server2 > >> > >>server1% mysql -P 3307 (in another term window) > >> > >>ERROR 1045 (28000): Access denied for user 'myusername'@'localhost' > >> (using > >>password: YES) > >> > >> > > You need to grant permissions to 'myusername'@'localhost' as indicated > > in the line above. > > > > Yes, I understand the error message. What confused me was if I connected > as 'myusername' directly on server2, there was not any problem at all as > what was shown in the following in my original post. So in another word, > 'myusername'@'localhost' was denied access if connecting via port > forwarding, but it's allowed access if connecting from localhost. Hence my > question, if port forwarded connections are really taken as local > connections??? > > >>But on server2, the following command works fine. > >> > >>server2% mysql -h localhost -u myusername -p > >> > >>I'd appreciate if anybody would shed some light. > >> > >>Bing > >> > > Bing > > -- > MySQL General Mailing List > For list archives: http://lists.mysql.com/mysql > To unsubscribe: http://lists.mysql.com/[EMAIL PROTECTED] > >