access from everywhere but localhost?

hi,

this surely is a beginners question:

i already created a user and privileges like this:

GRANT ALL PRIVILEGES ON `xxx`.* TO 'yyy'@'%' identified by 'zzz';

how do i modify this setup to remove access from localhost/127.0.0.1?

mysql version is 5.1.49

thx
matthias


--
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe: http://lists.mysql.com/mysql?unsub=gcdmg-mysql-2@m.gmane.org

Re: access from everywhere but localhost?

Replace GRANT with REVOKE



On Jun 20, 2011, at 8:08 PM, Matthias Leopold wrote:

> hi,
>
> this surely is a beginners question:
>
> i already created a user and privileges like this:
>
> GRANT ALL PRIVILEGES ON `xxx`.* TO 'yyy'@'%' identified by 'zzz';
>
> how do i modify this setup to remove access from localhost/127.0.0.1?
>
> mysql version is 5.1.49
>
> thx
> matthias
>
>
> --
> MySQL General Mailing List
> For list archives: http://lists.mysql.com/mysql
> To unsubscribe: http://lists.mysql.com/mysql?unsub=sangprabv@gmail.com
>

Willy Mularto
F300HD+MR18DE (NLC1725)








--
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe: http://lists.mysql.com/mysql?unsub=gcdmg-mysql-2@m.gmane.org

Re: access from everywhere but localhost?

--20cf303f6adcdbdc3404a624a1ff
Content-Type: text/plain; charset=ISO-8859-1

Grant only to the hosts you want to have access to your data.

Andy
On 20 Jun 2011 14:20, "Willy Mularto" wrote:
> Replace GRANT with REVOKE
>
>
>
> On Jun 20, 2011, at 8:08 PM, Matthias Leopold wrote:
>
>> hi,
>>
>> this surely is a beginners question:
>>
>> i already created a user and privileges like this:
>>
>> GRANT ALL PRIVILEGES ON `xxx`.* TO 'yyy'@'%' identified by 'zzz';
>>
>> how do i modify this setup to remove access from localhost/127.0.0.1?
>>
>> mysql version is 5.1.49
>>
>> thx
>> matthias
>>
>>
>> --
>> MySQL General Mailing List
>> For list archives: http://lists.mysql.com/mysql
>> To unsubscribe: http://lists.mysql.com/mysql?unsub=sangprabv@gmail.com
>>
>
> Willy Mularto
> F300HD+MR18DE (NLC1725)
>
>
>
>
>
>
>
>
> --
> MySQL General Mailing List
> For list archives: http://lists.mysql.com/mysql
> To unsubscribe: http://lists.mysql.com/mysql?unsub=eroomydna@gmail.com
>

--20cf303f6adcdbdc3404a624a1ff--

Re: access from everywhere but localhost?

this of course removes access from everywhere which is not want i want

regards
matthias

Am 2011-06-20 15:19, schrieb Willy Mularto:
> Replace GRANT with REVOKE
>
>
>
> On Jun 20, 2011, at 8:08 PM, Matthias Leopold wrote:
>
>> hi,
>>
>> this surely is a beginners question:
>>
>> i already created a user and privileges like this:
>>
>> GRANT ALL PRIVILEGES ON `xxx`.* TO 'yyy'@'%' identified by 'zzz';
>>
>> how do i modify this setup to remove access from localhost/127.0.0.1?
>>
>> mysql version is 5.1.49
>>
>> thx
>> matthias
>>
>>
>> --
>> MySQL General Mailing List
>> For list archives: http://lists.mysql.com/mysql
>> To unsubscribe: http://lists.mysql.com/mysql?unsub=sangprabv@gmail.com
>>
>
> Willy Mularto
> F300HD+MR18DE (NLC1725)
>
>
>
>
>
>
>


--
Mit freundlichen Grüssen

Matthias Leopold
System & Network Administration

Streams Telecommunicationsservices GmbH
Universitaetsstrasse 10/7, 1090 Vienna, Austria

tel: +43 1 40159113
fax: +43 1 40159300
------------------------------------------------

--
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe: http://lists.mysql.com/mysql?unsub=gcdmg-mysql-2@m.gmane.org

Re: access from everywhere but localhost?

does this mean that "access from everywhere but localhost" is impossible?

matthias

Am 2011-06-20 15:22, schrieb Andrew Moore:
> Grant only to the hosts you want to have access to your data.
>
> Andy
>
> On 20 Jun 2011 14:20, "Willy Mularto" > > wrote:
> > Replace GRANT with REVOKE
> >
> >
> >
> > On Jun 20, 2011, at 8:08 PM, Matthias Leopold wrote:
> >
> >> hi,
> >>
> >> this surely is a beginners question:
> >>
> >> i already created a user and privileges like this:
> >>
> >> GRANT ALL PRIVILEGES ON `xxx`.* TO 'yyy'@'%' identified by 'zzz';
> >>
> >> how do i modify this setup to remove access from localhost/127.0.0.1
> ?
> >>
> >> mysql version is 5.1.49
> >>
> >> thx
> >> matthias
> >>
> >>
> >> --
> >> MySQL General Mailing List
> >> For list archives: http://lists.mysql.com/mysql
> >> To unsubscribe: http://lists.mysql.com/mysql?unsub=sangprabv@gmail.com
> >>
> >
> > Willy Mularto
> > F300HD+MR18DE (NLC1725)
> >
> >
> >
> >
> >
> >
> >
> >
> > --
> > MySQL General Mailing List
> > For list archives: http://lists.mysql.com/mysql
> > To unsubscribe: http://lists.mysql.com/mysql?unsub=eroomydna@gmail.com
> >


--
Mit freundlichen Grüssen

Matthias Leopold
System & Network Administration

Streams Telecommunicationsservices GmbH
Universitaetsstrasse 10/7, 1090 Vienna, Austria

tel: +43 1 40159113
fax: +43 1 40159300
------------------------------------------------

--
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe: http://lists.mysql.com/mysql?unsub=gcdmg-mysql-2@m.gmane.org

Re: access from everywhere but localhost?

--90e6ba4fbe80127e9a04a624e768
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

Nope, for example you can assign access to db1.* to user1@192.168.% which
doesn't include localhost or 127.0.0.1.
On 20 Jun 2011 14:35, "Matthias Leopold" wrote:
> does this mean that "access from everywhere but localhost" is impossible?
>
> matthias
>
> Am 2011-06-20 15:22, schrieb Andrew Moore:
>> Grant only to the hosts you want to have access to your data.
>>
>> Andy
>>
>> On 20 Jun 2011 14:20, "Willy Mularto" >> > wrote:
>> > Replace GRANT with REVOKE
>> >
>> >
>> >
>> > On Jun 20, 2011, at 8:08 PM, Matthias Leopold wrote:
>> >
>> >> hi,
>> >>
>> >> this surely is a beginners question:
>> >>
>> >> i already created a user and privileges like this:
>> >>
>> >> GRANT ALL PRIVILEGES ON `xxx`.* TO 'yyy'@'%' identified by 'zzz';
>> >>
>> >> how do i modify this setup to remove access from localhost/127.0.0.1
>> ?
>> >>
>> >> mysql version is 5.1.49
>> >>
>> >> thx
>> >> matthias
>> >>
>> >>
>> >> --
>> >> MySQL General Mailing List
>> >> For list archives: http://lists.mysql.com/mysql
>> >> To unsubscribe: http://lists.mysql.com/mysql?unsub=3Dsangprabv@gmail.=
com
>> >>
>> >
>> > Willy Mularto
>> > F300HD+MR18DE (NLC1725)
>> >
>> >
>> >
>> >
>> >
>> >
>> >
>> >
>> > --
>> > MySQL General Mailing List
>> > For list archives: http://lists.mysql.com/mysql
>> > To unsubscribe: http://lists.mysql.com/mysql?unsub=3Deroomydna@gmail.c=
om
>> >
>
>
> --
> Mit freundlichen Grüssen
>
> Matthias Leopold
> System & Network Administration
>
> Streams Telecommunicationsservices GmbH
> Universitaetsstrasse 10/7, 1090 Vienna, Austria
>
> tel: +43 1 40159113
> fax: +43 1 40159300
> ------------------------------------------------

--90e6ba4fbe80127e9a04a624e768--

Re: access from everywhere but localhost?

--90e6ba21223fbb985504a6252f7f
Content-Type: text/plain; charset=ISO-8859-1

MySQL works on a ALLOW scheme, and since % contains all you need to specify
a more specific 'rule'.

you can use this dirty trick:

GRANT USAGE ON `xxx`.* TO 'yyy'@'127.0.0.1' identified by
'impossible-password';
GRANT USAGE ON `xxx`.* TO 'yyy'@'localhost' identified by
'impossible-password';

Cheers

Claudio



2011/6/20 Matthias Leopold

> hi,
>
> this surely is a beginners question:
>
> i already created a user and privileges like this:
>
> GRANT ALL PRIVILEGES ON `xxx`.* TO 'yyy'@'%' identified by 'zzz';
>
> how do i modify this setup to remove access from localhost/127.0.0.1?
>
> mysql version is 5.1.49
>
> thx
> matthias
>
>
> --
> MySQL General Mailing List
> For list archives: http://lists.mysql.com/mysql
> To unsubscribe: http://lists.mysql.com/mysql?**
> unsub=claudio.nanni@gmail.com
>
>


--
Claudio

--90e6ba21223fbb985504a6252f7f--