Re: blank user names in user table

2006-05-05 Thread sheeri kritzer

Rich,

anonymous access means that ''@host has access.  That is, blank at
host, as opposed to [EMAIL PROTECTED]

To see if anonymous access is allowed, at the command prompt type:

mysql -u asdf

if you get a mysql login, you have anonymous access.

Otherwise you'll get:
ERROR 1045 (28000): Access denied for user 'asdf'@'localhost' (using
password: NO)

The best way is to do:

mysql select host,user,password from mysql.user;

and see if any users or passwords are blank.  if users are blank, it
means anyone can login, and if passwords are blank it means the
password isn't set.

You can also look at:

mysql show grants for ''@localhost;
mysql show grants for ''@'%';

hope it helps!

-Sheeri

On 5/4/06, Duzenbury, Rich [EMAIL PROTECTED] wrote:

Hi all,

I've got a database I recently inherited where there are a number of
records in the mysql.user table that have no user id.  According to the
mysql docs, this is supposed to allow guest access, and there is mention
of how to turn it off.

How does one actually connect in guest mode?  My attempts with the mysql
client have so far been in vain.

How can I ask mysql to log connection attempts by users so I can see if
any of these ID's are actually in use?

Thank you.

Regards,
Rich

--
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]




--
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]



RE: blank user names in user table (SOLVED)

2006-05-05 Thread Duzenbury, Rich
 

 -Original Message-
 From: sheeri kritzer [mailto:[EMAIL PROTECTED] 
 Sent: Friday, May 05, 2006 2:37 PM
 To: Duzenbury, Rich
 Cc: mysql@lists.mysql.com
 Subject: Re: blank user names in user table
 
 Rich,
 
 anonymous access means that ''@host has access.  That is, 
 blank at host, as opposed to [EMAIL PROTECTED]
 
 To see if anonymous access is allowed, at the command prompt type:
 
 mysql -u asdf

This doesn't work.  If I 

grant all on *.* to ''@workstation.domain.local

Then, I find a record in mysql.user with host=workstation.domain.local,
user is blank, password is blank.  If I then connect to the server from
my workstation using the MySQL query browser and leave the user id and
password blank, it connects and works. 

After much horsing around, I can make it work as:
mysql --user=anything --host=host -p
(Press enter at the password prompt)

Silly me, I thought I had to somehow supply a blank value for the user
name.  Instead, I have to simply supply an empty password.

Thanks for your help!

Regards,
Rich

--
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]



blank user names in user table

2006-05-04 Thread Duzenbury, Rich
Hi all,

I've got a database I recently inherited where there are a number of
records in the mysql.user table that have no user id.  According to the
mysql docs, this is supposed to allow guest access, and there is mention
of how to turn it off.

How does one actually connect in guest mode?  My attempts with the mysql
client have so far been in vain.

How can I ask mysql to log connection attempts by users so I can see if
any of these ID's are actually in use?

Thank you.

Regards,
Rich 

--
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]