access from everywhere but localhost?

hi, this surely is a beginners question: i already created a user and privileges like this: GRANT ALL PRIVILEGES ON `xxx`.* TO 'yyy'@'%' identified by 'zzz'; how do i modify this setup to remove access from localhost/127.0.0.1? mysql version is 5.1.49 thx matthias -- MySQL General Mailing

Re: access from everywhere but localhost?

Replace GRANT with REVOKE On Jun 20, 2011, at 8:08 PM, Matthias Leopold wrote: hi, this surely is a beginners question: i already created a user and privileges like this: GRANT ALL PRIVILEGES ON `xxx`.* TO 'yyy'@'%' identified by 'zzz'; how do i modify this setup to remove access

Re: access from everywhere but localhost?

Grant only to the hosts you want to have access to your data. Andy On 20 Jun 2011 14:20, Willy Mularto sangpr...@gmail.com wrote: Replace GRANT with REVOKE On Jun 20, 2011, at 8:08 PM, Matthias Leopold wrote: hi, this surely is a beginners question: i already created a user and

Re: access from everywhere but localhost?

this of course removes access from everywhere which is not want i want regards matthias Am 2011-06-20 15:19, schrieb Willy Mularto: Replace GRANT with REVOKE On Jun 20, 2011, at 8:08 PM, Matthias Leopold wrote: hi, this surely is a beginners question: i already created a user and

Re: access from everywhere but localhost?

does this mean that access from everywhere but localhost is impossible? matthias Am 2011-06-20 15:22, schrieb Andrew Moore: Grant only to the hosts you want to have access to your data. Andy On 20 Jun 2011 14:20, Willy Mularto sangpr...@gmail.com mailto:sangpr...@gmail.com wrote: Replace

Re: access from everywhere but localhost?

Nope, for example you can assign access to db1.* to user1@192.168.% which doesn't include localhost or 127.0.0.1. On 20 Jun 2011 14:35, Matthias Leopold matth...@aic.at wrote: does this mean that access from everywhere but localhost is impossible? matthias Am 2011-06-20 15:22, schrieb Andrew

Re: access from everywhere but localhost?

MySQL works on a ALLOW scheme, and since % contains all you need to specify a more specific 'rule'. you can use this dirty trick: GRANT USAGE ON `xxx`.* TO 'yyy'@'127.0.0.1' identified by 'impossible-password'; GRANT USAGE ON `xxx`.* TO 'yyy'@'localhost' identified by 'impossible-password';