LinuxForum.Fans
Тема

MySQL + доступ из вне?

Автор: sotariz 12 сообщений 8753 просмотров
#124069

Прошу сильно ногами не пинать :)
Установлен мускул, со стандартным портом (3306), слушает сеть (#skip-networking), на роутере порт расшарен и переброшен, при конекте с мускулу через инет получаю такое сообщение (Database connection failed: Host 'мой_текущий_IP' is not allowed to connect to this MySQL server). Собственно вопрос - как разрешить мускулу принимать удаленное соединение?

#124108

Попробуй сначала подконектитса к мускулу по сети из компа каторый находитса с ним в одной сети. Тогда увидиш, будет ли конект.

#124381

увы, нет такой возможности проверить... могу только выложить my.cnf и проверять из внешки

#124403

Давай конфиг. Я файрвол не блочит трафик который идёт на мускул?.

#124405

от имени какого пользователя подключаетесь?.... telnet соединение на этот порт проходит?

#124416

мускул находится за NAT'ом, порт с роутера прокинут, в фаерволе в исключении, подключаюсь рутом

Показать
# A generic my.cnf file based on /usr/share/mysql/my-medium.cnf
#
# This is for a system with little memory (32M - 64M) where MySQL plays
# an important part, or systems up to 128M where MySQL is used together with
# other programs (such as a web server)
#

# The following options will be passed to all MySQL clients
[client]
user = root
#password = **********
port = 3306
#socket = /var/lib/mysql/mysql.sock

# Here follows entries for some specific programs

# The MySQL server
[mysqld]
user = mysql
datadir = /var/lib/mysql
port = 3306
#socket = /var/lib/mysql/mysql.sock
pid-file = /var/run/mysqld/mysqld.pid
skip-locking
key_buffer = 16M
max_allowed_packet = 32M
table_cache = 64
sort_buffer_size = 512K
net_buffer_length = 8K
read_buffer_size = 256K
read_rnd_buffer_size = 512K
myisam_sort_buffer_size = 8M
collation_server = utf8_unicode_ci
character_set_server = utf8

# plugins
plugin_dir=/usr/lib/mysql/plugin
#plugin-load=ha_archive.so;ha_blackhole.so;ha_innodb.so;ha_revision.so;ha_sphinx.so;libpbxt.so

# acivate the federated storage engine
federated

# Default to using old password format for compatibility with old and
# shorter password hash.
# Reference: http://dev.mysql.com/doc/mysql/en/Password_hashing.html
old_passwords

# Don't listen on a TCP/IP port at all. This can be a security enhancement,
# if all processes that need to connect to mysqld run on the same host.
# All interaction with mysqld must be made via Unix sockets or named pipes.
# Note that using this option without enabling named pipes on Windows
# (via the "enable-named-pipe" option) will render mysqld useless!
#
#skip-networking

# Disabling symbolic-links is recommended to prevent assorted security risks
symbolic-links=0

# Replication Master Server (default)
# binary logging is required for replication
#log-bin=mysql-bin

# required unique id between 1 and 2^32 - 1
# defaults to 1 if master-host is not set
# but will not function as a master if omitted
server-id = 1

# Replication Slave (comment out master section to use this)
#
# To configure this host as a replication slave, you can choose between
# two methods :
#
# 1) Use the CHANGE MASTER TO command (fully described in our manual) -
# the syntax is:
#
# CHANGE MASTER TO MASTER_HOST=<host>, MASTER_PORT=<port>,
# MASTER_USER=<user>, MASTER_PASSWORD=<password> ;
#
# where you replace <host>, <user>, <password> by quoted strings and
# <port> by the master's port number (3306 by default).
#
# Example:
#
# CHANGE MASTER TO MASTER_HOST='125.564.12.1', MASTER_PORT=3306,
# MASTER_USER='joe', MASTER_PASSWORD='secret';
#
# OR
#
# 2) Set the variables below. However, in case you choose this method, then
# start replication for the first time (even unsuccessfully, for example
# if you mistyped the password in master-password and the slave fails to
# connect), the slave will create a master.info file, and any later
# change in this file to the variables' values below will be ignored and
# overridden by the content of the master.info file, unless you shutdown
# the slave server, delete master.info and restart the slaver server.
# For that reason, you may want to leave the lines below untouched
# (commented) and instead use CHANGE MASTER TO (see above)
#
# required unique id between 2 and 2^32 - 1
# (and different from the master)
# defaults to 2 if master-host is set
# but will not function as a slave if omitted
#server-id = 2
#
# The replication master for this slave - required
#master-host = <hostname>
#
# The username the slave will use for authentication when connecting
# to the master - required
#master-user = <username>
#
# The password the slave will authenticate with when connecting to
# the master - required
#master-password = <password>
#
# The port the master is listening on.
# optional - defaults to 3306
#master-port = <port>
#
# binary logging - not required for slaves, but recommended
#log-bin=mysql-bin

# Point the following paths to different dedicated disks
tmpdir = /var/tmp
#log-update = /path-to-dedicated-directory/hostname

# Uncomment the following if you are using BDB tables
#bdb_cache_size = 4M
#bdb_max_lock = 10000

# Uncomment the following if you are using InnoDB tables
#innodb_data_home_dir = /var/lib/mysql/
#innodb_data_file_path = ibdata1:10M:autoextend
#innodb_log_group_home_dir = /var/lib/mysql/
#innodb_log_arch_dir = /var/lib/mysql/
# You can set .._buffer_pool_size up to 50 - 80 %
# of RAM but beware of setting memory usage too high
#innodb_buffer_pool_size = 16M
#innodb_additional_mem_pool_size = 2M
# Set .._log_file_size to 25 % of buffer pool size
#innodb_log_file_size = 5M
#innodb_log_buffer_size = 8M
#innodb_flush_log_at_trx_commit = 1
#innodb_lock_wait_timeout = 50

#bind-address=192.168.100.1

## Options for mysqld process:
#ndbcluster # run NDB engine
#ndb-connectstring=192.168.0.10 # location of MGM node

## Options for ndbd process:
#[mysql_cluster]
#ndb-connectstring=192.168.0.10 # location of MGM node

[mysqldump]
quick
max_allowed_packet = 16M

[mysql]
no-auto-rehash
# Remove the next comment character if you are not familiar with SQL
#safe-updates
default-character-set = utf8

[isamchk]
key_buffer = 20M
sort_buffer_size = 20M
read_buffer = 2M
write_buffer = 2M

[myisamchk]
key_buffer = 20M
sort_buffer_size = 20M
read_buffer = 2M
write_buffer = 2M

[mysqlhotcopy]
interactive-timeout

[mysql.server]
user=mysql
basedir=/var/lib

[mysqld_safe]
err-log=/var/log/mysqld/mysqld.log
pid-file=/var/run/mysqld/mysqld.pid

# MySQL Instance Manager options section
[manager]
user=mysql
default-mysqld-path=/usr/sbin/mysqld
socket=/var/lib/mysql/mysqlmanager.sock
pid-file=/var/run/mysqld/mysqlmanager.pid
password-file=/etc/mysqlmanager.passwd
run-as-service
monitoring-interval=20
port=2273
#bind-address=192.168.100.1
#124417

вы бы доку к мускулу прочли... рутом только локально можно....

#124419

[root@localhost]# telnet ххх.ххх.ххх.ххх 3306
Trying ххх.ххх.ххх.ххх...
Connected to ip.css.od.ua (ххх.ххх.ххх.ххх).
Escape character is '^]'.
HHost 'ууу.ууу.ууу.ууу' is not allowed to connect to this MySQL serverConnection closed by foreign host.
[root@localhost]#

#124420
odin написал:
вы бы доку к мускулу прочли... рутом только локально можно....

сорри, я как-то не в курсе был... был уверен что рутом можно все)) (супер пользователь ведь :D )... а как настроить доступ другому пользователю? я учусь всему в спешке...

#124422

давать доступ руту из вне не безопасно... вот

#124430

создал пользователя, дал ему фул доступ к необходимым БД и эффект тот-же :(
Database connection failed: Access denied for user 'server'@'мой_текущий_IP' (using password: YES)
я как бы хотел что бы этот пользователь мог соединяться с базой с любого IP

#124431

получилось :) значение host для юзера нужно было поставить %.
Odin, спасибо за помощь и наводку на путь! :)

Войдите или зарегистрируйтесь, чтобы ответить.