Re: mysql database, user table, two root accounts

[Michael Stassen]

As [EMAIL PROTECTED] and [EMAIL PROTECTED] are separate entries in the user table, 
each with its own password and privileges, they are 2 separate root 
accounts from mysql's perspective.  You could choose to think of them as 
the same account by keeping their settings the same, or you could choose 
to think of them as separate root accounts, possibly with separate 
settings.  You could, for example, give root fewer privs when connecting 
externally than via localhost.  Many people, myself included, eliminate 
[EMAIL PROTECTED] altogether, so that the root user can only connect from 
localhost, or replace the % with something more limiting (say 
[EMAIL PROTECTED]).  Ask yourself which IPs should be allowed to 
administer mysql as root and act accordingly.

In any case, the  [EMAIL PROTECTED] entry you quoted below has no password!  To be 
safe, you should immediately assign it a password or drop it.

See <http://www.mysql.com/doc/en/Privileges.html> and 
<http://www.mysql.com/doc/en/User_Account_Management.html> for more.

Michael

Leo Donahue wrote:

Yes, this helps thank you.

-----Original Message-----
From: Arjun Subramanian [mailto:[EMAIL PROTECTED]
Sent: Friday, January 09, 2004 2:16 PM
To: 'Leo Donahue'; [EMAIL PROTECTED]
Subject: RE: mysql database, user table, two root accounts
That's not two root accounts. What that means is this:

The first line defines privileges for root connecting from localhost
The second line defines privileges for root connecting from any remote
host. Hence the "%". It implies [EMAIL PROTECTED]
Hope this helps.

Arjun Subramanian
Georgia Tech Station 32003
Atlanta GA 30332
Cell: +404.429.5513
http://www.arjunweb.com
-----Original Message-----
From: Leo Donahue [mailto:[EMAIL PROTECTED] 
Sent: Friday, January 09, 2004 2:47 PM
To: [EMAIL PROTECTED]
Subject: mysql database, user table, two root accounts

I am less than 24 hours new to MySql.  I have executed the following sql
scripts:
use mysql;
delete from user where User='';
delete from db where User='';
flush privileges;
select host, user, password from user;

The last sql query yields the following:

host            user            password
---------------------------------
localhost       root            hexadecimal values.
%               root            nothing here.
Why are there two root accounts?

Thanks,
ld



--
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe:    http://lists.mysql.com/[EMAIL PROTECTED]