In a message dated 9/13/03 8:40:08 AM Eastern Daylight Time, 
[EMAIL PROTECTED] writes:

> 1) can I create groups, add users and assign privileges to the group?
Yup.

>  2) since this system is going over a VPN the data should be encrypt using 
> 3DES.  If a authorized user needs access to the data who is not in the VPN 
> this information would be traveling in a clear text format (please correct 
> meif I'm wrong) but is there a way to encrypt the data?
For starters, I'd recommend always using SSH (whether VPNing or not) to 
encrypt the pipe (puTTY.exe is a great, free Windows-based terminal emulator for 
that, or Cygwin).  

It also depends on how your users are connecting (VPNers and other) and are 
you planning on using ODBC?  If so, check out the net on redirecting ODBC 
requests through SSH.  That way the pipe is encrypted, so whether the data is or 
not is less (but still) important.  The config is something like this:

  <client machine>   ssh -L 80:192.168.0.254:80 -l root -T 192.168.0.254
  (You'll need the root password to the DB machine in this case)

  Check out: http://archives.postgresql.org/pgsql-odbc/2001-09/msg00040.php 
for more info.

How will you be maintaining the DB?  Through scripts?  If so, SSH and ban 
Telnet.  If you plan to use a GUI, you might check out 
www.ems-hitech.com/mymanager which  provides a method for using SSL (its about $135.00 
US).

HTH,
Tony

-- 
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe:    http://lists.mysql.com/[EMAIL PROTECTED]

Reply via email to