Securing MySQL on Mac OSX

2009-03-11 Thread Matthew Stuart
I am in the process of installing MySQL and PHP on my Mac following instruction in a book written by a chap called David Powers. I have come to a section that is called 'Securing MySQL on Mac OSX'. Basically it states that MySQL is up and running with a default account of 'root' and it's

Re: Securing MySQL on Mac OSX

2009-03-11 Thread Tom Brown
It mentions that root in MySQL has nothing to do with the root of Mac OSX, but I need to know if MySQL being unprotected in this way has opened a door for hackers. it means that they can do whatever they want to the mysql db's without being prompted for a password. This does not mean

Securing Mysql 4.1 on the mac.

2005-04-15 Thread Brett Harvey
Hello, I went through the install for mysql 4.1.11 on the mac. Two different macs. When I leave the password empty (don't make changes), I can connect with CocoaMysql and the Mysql Administrator without any problem. Obviously, I don't want to leave the root (or any user) without a password.

Re: Securing Mysql 4.1 on the mac.

2005-04-15 Thread Brent Baisley
Can you login using the mysql command line client from your Mac? mysql -u username -p That will make sure the password is set and working. What do you mean by failed? You get a message about incorrect password? I've never had a problem with installing and using mysql on a Mac. On Apr 15, 2005, at

Securing mysql from remote access

2004-11-30 Thread Scott Haneda
I can do a telnet host.com 3386 and get a answer back from mysql. Is the only way to turn off remote access like this with a router and limit the ports, or is there some setting in mysql that will not allow outside connections other than from a IP range I tell it to? --

Re: Securing mysql from remote access

2004-11-30 Thread Victor Pendleton
If you plan on connecting only from the localhost host or via an ssh tunnel you block port 3306 at the firewall or router. What exactly are you looking to accomplish? Scott Haneda wrote: I can do a telnet host.com 3386 and get a answer back from mysql. Is the only way to turn off remote access

Re: Securing mysql from remote access

2004-11-30 Thread Scott Haneda
on 11/30/04 8:53 PM, Victor Pendleton at [EMAIL PROTECTED] wrote: If you plan on connecting only from the localhost host or via an ssh tunnel you block port 3306 at the firewall or router. What exactly are you looking to accomplish? Well, some friend of a friend decided to scan me and found

Re: Securing mysql from remote access

2004-11-30 Thread Victor Pendleton
Some of the vulnerabilities have been addressed in recent releases. I would check the bug list and change log to see if your versions have been patched. If you want to disallow all tcp/ip connections you can use the |--skip-networking parameter. Only Unix sockets or Windows named pipes

Securing MYSQL

2002-12-26 Thread John Chang
I have a website that uses MYSQL, PHP, IIS, WMS4.1 on a win2k box. The WMS4.1 is on a separate box and uses MyODBC to connect to MySQL. It only does look up. On the other box that has MYSQL, PHP, IIS there is insert, delete, select, etc. How do I secure MYSQL with NTFS permissions so that

Securing MySQL?

2002-01-21 Thread Takacs Istvan
Hi I want to secure our MySQL DB as much as possible. In the freshly installed DB I have found two records in the mysql.user which has no value in the User and Password field; --+---++-+++ | Host | User | Password |

Securing MySQL?

2002-01-21 Thread Victoria Reznichenko
Hello Takacs, Monday, January 21, 2002, 1:42:06 PM, you wrote: TI I want to secure our MySQL DB as much as possible. TI In the freshly installed DB I have found two records in TI the mysql.user which has no value in the User and TI Password field; TI