RE: Recommend A Backup User / Privileges?
Carlos mennens wrote: Can you guys recommend something for me here? I don't really know enough about MySQL 'grant' permissions to determine which would work or if the 'backup' user would require high level privileges. Hi, Set the rights of the script file to rwx-- . So only the owner can read it. Or provide in the home of the user who executes the script a file named .my.cnf . Inside that file you provide a section [mysqld] , where you can specify the user and the password to connect to the database. Also this file has only to be readable for the user who executes the script (rwx--). Bernd -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:http://lists.mysql.com/mysql?unsub=arch...@jab.org
Re: Recommend A Backup User / Privileges?
Hi Carlos, I would say the below grants for a user to perform backup is the minimum grants which we can provide.. grant select , lock tables, file on *.* to backup_user'@'localhost' identified by 'somepassword'; Thanks Anand On Wed, Apr 28, 2010 at 10:28 PM, Carlos Mennens carlosw...@gmail.comwrote: I downloaded a MySQL backup script today since I have 3 or 4 relatively small databases. The script can be found here: http://sourceforge.net/projects/automysqlbackup/ Now I was wondering if I can create a local database user 'backup'@'localhost' grant him a level of permissions needed to perform a 'mysqldump' so he can backup the databases to an directory on the server. My Question is what level or permissions does a user need to perform a 'mysqldump' on a database since that particular user's password will be entered into the script noted above via plain text. I am scared the password will be compromised that would be bad if it's root or someone who has GRANT ALL PRIVILEGES ON *.*. Can you guys recommend something for me here? I don't really know enough about MySQL 'grant' permissions to determine which would work or if the 'backup' user would require high level privileges. -Carlos -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:http://lists.mysql.com/mysql?unsub=anand@gmail.com
Recommend A Backup User / Privileges?
I downloaded a MySQL script that backs up all my databases automatically which looks to work amazing. My question is in this particular script (linked below) there is a section to add a user name and password for someone who has access to the databases I am attempting to backup with the script. Now I could just place the MySQL root user or my own user (admin) account in here which has a plain text password exposed in the configuration for all to see. Should I create a generic user in MySQL just for backup roles and privileges? I don't know enough about GRANT OPTIONS or backups to know if I can create a dummy user and give him only what he requires to backup the databases safely or if this script requires the root or someone with GRANT ALL OPTIONS enabled. http://sourceforge.net/projects/automysqlbackup/ Thanks for any info! -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:http://lists.mysql.com/mysql?unsub=arch...@jab.org
Recommend A Backup User / Privileges?
I downloaded a MySQL backup script today since I have 3 or 4 relatively small databases. The script can be found here: http://sourceforge.net/projects/automysqlbackup/ Now I was wondering if I can create a local database user 'backup'@'localhost' grant him a level of permissions needed to perform a 'mysqldump' so he can backup the databases to an directory on the server. My Question is what level or permissions does a user need to perform a 'mysqldump' on a database since that particular user's password will be entered into the script noted above via plain text. I am scared the password will be compromised that would be bad if it's root or someone who has GRANT ALL PRIVILEGES ON *.*. Can you guys recommend something for me here? I don't really know enough about MySQL 'grant' permissions to determine which would work or if the 'backup' user would require high level privileges. -Carlos -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:http://lists.mysql.com/mysql?unsub=arch...@jab.org
Backup User
Is it recommended to create a MySQL user for doing backups? Running mysqldump from a script, the username and password will have to be embedded in plain text. If I were to create a MySQL user expressly for doing nightly backups what are the minimum permissions needed? -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]
Re: Backup User
Jim McAtee wrote: Is it recommended to create a MySQL user for doing backups? Running mysqldump from a script, the username and password will have to be embedded in plain text. If I were to create a MySQL user expressly for doing nightly backups what are the minimum permissions needed? You don't need to create a special MySQL user for backups. If you like, you can create a Linux account that only you know the password to, and then make sure the backup scripts is only readable by you ( root will also be able to read it ). Or just run the backup script as root, and then root can only read it ( you have to set the correct permissions here too of course ). -- Daniel Kasak IT Developer NUS Consulting Group Level 5, 77 Pacific Highway North Sydney, NSW, Australia 2060 T: (+61) 2 9922-7676 / F: (+61) 2 9922 7989 email: [EMAIL PROTECTED] website: http://www.nusconsulting.com.au -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]
Re: Backup User
On Thu, Feb 24, 2005 at 08:39:00AM +1100, Daniel Kasak [EMAIL PROTECTED] wrote: You don't need to create a special MySQL user for backups. If you like, you can create a Linux account that only you know the password to, and then make sure the backup scripts is only readable by you ( root will also be able to read it ). Or just run the backup script as root, and then root can only read it ( you have to set the correct permissions here too of course ). What you really want to avoid is having the password on the commandline. File permissions won't matter at all if you end up running a command that puts your password in the output of 'ps'! Command lines are always public information. Put the password for mysqldump in the running user's ~/.my.cnf instead, and tighten the permissions on *that* file. [client] password=Your password goes here -Rich -- Rich Lafferty --+--- Ottawa, Ontario, Canada| Save the Pacific Northwest Tree Octopus! http://www.lafferty.ca/|http://zapatopi.net/treeoctopus.html [EMAIL PROTECTED] ---+--- -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]
Re: Backup User
- Original Message - From: Daniel Kasak [EMAIL PROTECTED] To: Jim McAtee [EMAIL PROTECTED]; mysql@lists.mysql.com Sent: Wednesday, February 23, 2005 2:39 PM Subject: Re: Backup User Jim McAtee wrote: Is it recommended to create a MySQL user for doing backups? Running mysqldump from a script, the username and password will have to be embedded in plain text. If I were to create a MySQL user expressly for doing nightly backups what are the minimum permissions needed? You don't need to create a special MySQL user for backups. If you like, you can create a Linux account that only you know the password to, and then make sure the backup scripts is only readable by you ( root will also be able to read it ). Or just run the backup script as root, and then root can only read it ( you have to set the correct permissions here too of course ). Thanks. Lets say I did this but still wanted to use a MySQL user with minimum privileges. The server is running MySQL 3.23.49 and all tables are MyISAM. It appears that I can do backups with just Select and File privileges. Somoene else suggested those privileges plus 'Lock Tables'. I'm guessing Lock Tables was added to user privileges in v4.0. If I'm using mysqldump --opt, will tables be locked if the user only has Select File privileges? I can't really tell if the tables are being locked when I run the command. -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]
mysql backup user permissions?
i want to add a user to my system that has permissions to backup all the databases using mysqlhotcopy. i don't want to use the root user. so what permissions (minium set) should i give the user in order to accomplish this. thanks in advance, shon - Before posting, please check: http://www.mysql.com/manual.php (the manual) http://lists.mysql.com/ (the list archive) To request this thread, e-mail [EMAIL PROTECTED] To unsubscribe, e-mail [EMAIL PROTECTED] Trouble unsubscribing? Try: http://lists.mysql.com/php/unsubscribe.php
