Re: secure user name for MySQL account?

2012-09-24 Thread Arthur Fuller
Thanks for the update, Shawn. I'll check it out right now. On Mon, Sep 24, 2012 at 4:40 PM, Shawn Green wrote: > Hello Arthur, > > > On 9/24/2012 4:25 PM, Arthur Fuller wrote: > >> On this note, one thing that really bugs me about MySQL passwords is the >> inability to use special characters. In

Re: secure user name for MySQL account?

2012-09-24 Thread Shawn Green
Hello Arthur, On 9/24/2012 4:25 PM, Arthur Fuller wrote: On this note, one thing that really bugs me about MySQL passwords is the inability to use special characters. In the SQL Server world, I let users choose their own passwords, but obeying these rules: It cannot be a dictionary word or sequ

Re: secure user name for MySQL account?

2012-09-24 Thread Arthur Fuller
On this note, one thing that really bugs me about MySQL passwords is the inability to use special characters. In the SQL Server world, I let users choose their own passwords, but obeying these rules: It cannot be a dictionary word or sequence of words. It must contain at least one numeric digit. I

Re: secure user name for MySQL account?

2012-09-24 Thread Johan De Meersman
- Original Message - > From: "Rajeev Prasad" > > I am considering using cryptic username for accessing and working on > a database on my MySQL installation. can anyone with experience > provide some suggestion pl? Why would you make your life hard by using cryptic usernames? Have the u

secure user name for MySQL account?

2012-09-24 Thread Rajeev Prasad
I am considering using cryptic username for accessing and working on a database on my MySQL installation. can anyone with experience provide some suggestion pl? in documentation, i only see that it can be 16 char long. how complex it can be? any side effects/bugs of username complexity? can I us

Re: Secure Install Removed Root Accounts

2010-03-31 Thread Johan De Meersman
On Wed, Mar 31, 2010 at 3:52 PM, Carlos Mennens wrote: > mysql> CREATE USER 'carlos'@'localhost' IDENTIFIED BY 'holla'; > mysql> GRANT ALL PRIVILEGES ON *.* TO 'carlos'@'localhost' WITH GRANT > OPTION; > Pretty much. It's also a good idea to give that user SUPER privileges, as that'll allow you t

Re: Secure Install Removed Root Accounts

2010-03-31 Thread Carlos Mennens
On Wed, Mar 31, 2010 at 3:07 AM, Johan De Meersman wrote: > On Wed, Mar 31, 2010 at 12:25 AM, Carlos Mennens > wrote: >> >> hearing from many admins that MySQL expects and needs there to be >> three accounts for root. Them being 'localhost', 127.0.0.1, and >> hostname. Is this false information?

Re: Secure Install Removed Root Accounts

2010-03-31 Thread John Daisley
If you only want root to be able to log in locally then you only need 'root'@'localhost' unless you are using tcp connections. regards John On Tue, Mar 30, 2010 at 11:25 PM, Carlos Mennens wrote: > Today I installed MySQL 5.1.45-1 on my production server and it > recommended that I run the follo

Re: Secure Install Removed Root Accounts

2010-03-31 Thread Johan De Meersman
On Wed, Mar 31, 2010 at 12:25 AM, Carlos Mennens wrote: > hearing from many admins that MySQL expects and needs there to be > three accounts for root. Them being 'localhost', 127.0.0.1, and > hostname. Is this false information? > Totally false. It's convenient, and probably all of their scripts

Secure Install Removed Root Accounts

2010-03-30 Thread Carlos Mennens
Today I installed MySQL 5.1.45-1 on my production server and it recommended that I run the following: /usr/bin/mysql_secure_installation When I ran this, it simply guided me to do the following: - set root password - disable remote login for root - remove 'anonymous' user accounts - delete 'test

Re: secure mysql port

2007-11-16 Thread Cem Kayali
r. > > Any help would be greatly appreciated. > > Kelly > > > -- > MySQL General Mailing List > For list archives: http://lists.mysql.com/mysql > To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED] > > > - Cem Kayalı

Re: secure mysql port

2007-11-13 Thread David T. Ashley
On a *nix box, it is also traditional to configure IPTABLES or similar to restrict TCP/UDP connections based on IP and/or adapter. It seems likely based on your description that the box has two network connections. Dave. On 11/13/07, Michael Dykman <[EMAIL PROTECTED]> wrote: > > In my.cnf, you c

Re: secure mysql port

2007-11-13 Thread Michael Dykman
In my.cnf, you can specify a 'bind-address'. When used it will cause the listener to only be available to host on that same network ie. one of your database host's ip binding is 10.10.10.66/255.255.0.0 # this will list the server to respond only to hosts in the 10.10.x.x range, all other (includ

Re: secure mysql port

2007-11-13 Thread David Campbell
Kelly Opal wrote: Hi Is there any way to restrict access to the tcp port on mysql. I only want my 5 class C's to be able to access the port but it is a public server. Iptables Dave -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:htt

secure mysql port

2007-11-12 Thread Kelly Opal
Hi Is there any way to restrict access to the tcp port on mysql. I only want my 5 class C's to be able to access the port but it is a public server. Any help would be greatly appreciated. Kelly -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe

RE: secure host and user name for non static ip address

2007-10-11 Thread Doug Phillips
> QUESTION: What are the most secure permissions settings for > administrator > access to connect to my server without using a static IP address? Assuming a unix server (or even a windows server running SSH), use an SSH tunnel, and then connect to 127.0.0.1:whatever_port_you_chose. Yo

Re: secure host and user name for non static ip address

2007-10-11 Thread Michael Cole
Michael On 10/10/07, Stephen Sunderlin <[EMAIL PROTECTED]> wrote: > QUESTION: What are the most secure permissions settings for administrator > access to connect to my server without using a static IP address? > > > > MY ISP changes my DSL ip address almost daily s

Re: secure host and user name for non static ip address

2007-10-09 Thread Gary Josack
LETE privileges"... worst idea ever in my opinion. Anyone that knows your server/username can get in query and delete records. Stephen Sunderlin wrote: QUESTION: What are the most secure permissions settings for administrator access to connect to my server without using a static IP address?

secure host and user name for non static ip address

2007-10-09 Thread Stephen Sunderlin
QUESTION: What are the most secure permissions settings for administrator access to connect to my server without using a static IP address? MY ISP changes my DSL ip address almost daily so when I log on to MySQL Administrator with 'myusername'@'currentipaddress' using pass

RE: secure port 3306

2007-05-07 Thread Mogens Melander
and > Server-2. > Steve > > > -Original Message- > From: Mogens Melander [mailto:[EMAIL PROTECTED] > Sent: Monday, May 07, 2007 1:35 PM > To: Steven Buehler > Cc: mysql@lists.mysql.com > Subject: RE: secure port 3306 > > > On Mon, May 7, 2007 17:40, Steven

RE: secure port 3306

2007-05-07 Thread Steven Buehler
But I also need to make sure that nobody is sniffing between Server-1 and Server-2. Steve -Original Message- From: Mogens Melander [mailto:[EMAIL PROTECTED] Sent: Monday, May 07, 2007 1:35 PM To: Steven Buehler Cc: mysql@lists.mysql.com Subject: RE: secure port 3306 On Mon, May 7

RE: secure port 3306

2007-05-07 Thread Mogens Melander
On Mon, May 7, 2007 17:40, Steven Buehler wrote: > The thing is...I need to securely do this. Here would be the setup > Desktop -> Secure connection to Server 1 -> Secure connection to Server 2. > So I am assuming that what I need to do is to have the Desktop SSH into > Server

Re: secure port 3306

2007-05-07 Thread BJ Swope
eed to securely do this. Here would be the setup Desktop -> Secure connection to Server 1 -> Secure connection to Server 2. So I am assuming that what I need to do is to have the Desktop SSH into Server 1 which will have the iptables setup to tunnel to Server 2 and then use a tunnel from Se

RE: secure port 3306

2007-05-07 Thread Steven Buehler
-> Secure connection to Server 1 -> Secure connection to Server 2. So I am assuming that what I need to do is to have the Desktop SSH into Server 1 which will have the iptables setup to tunnel to Server 2 and then use a tunnel from Secure CRT (or putty) to tunnel all the way to Server 2 through Se

RE: secure port 3306

2007-05-04 Thread Steven Buehler
Thank You so much. I will have to try this later today. I have never done a port forward in iptables before. I knew that I could, but just never had a need or tried so it slipped my mind about this. Again, Thank You. Steve On linux, one could do a port forward: EXTIF=eth0 # Or wha

Re: secure port 3306

2007-05-02 Thread Mogens Melander
On linux, one could do a port forward: EXTIF=eth0 # Or whatever the interface that faces internet is called. iptables -A FORWARD -i $EXTIF -p tcp -s --dport 3306 -j ACCEPT iptables -A PREROUTING -t nat -p tcp -s \ -d --dport 3306 -j DNAT --to :3306 On Wed, May 2, 2007 17:03, Steven Buehler

RE: secure port 3306

2007-05-02 Thread Jay Blanchard
[snip] I have a client that needs to be able to remotely connect to port 3306 securely. I have tried to suggest an SSH Tunnel, but they do not want their clients to have SSH access. Another problem is that even if we do tunnel, it needs to go thru one server that is connected to the Internet and

secure port 3306

2007-05-02 Thread Steven Buehler
I have a client that needs to be able to remotely connect to port 3306 securely. I have tried to suggest an SSH Tunnel, but they do not want their clients to have SSH access. Another problem is that even if we do tunnel, it needs to go thru one server that is connected to the Internet and into th

Secure login / set maximum of login tries

2006-06-28 Thread Michael Decker
Hi, is there a way to set a maximum of login tries? Thanks, Michael Decker -- Michael Decker [EMAIL PROTECTED] TESIS SYSware GmbH http://www.tesis.de Baierbrunnerstr. 15 * 81379 Muenchen * Tel. +49 89 747377-0 -- MySQL General Mailing

MySQL Windows Bot Alert - Secure Your Servers

2005-01-27 Thread Mike Hillyer
t will then attempt to infect other machines. MySQL installations are at risk if proper security practices have not been followed. You need to act now to secure your Windows MySQL installation from this bot and help prevent the spread of the worm. The steps are very simple: 1. Firewall port 3306 f

Secure access to the Data structures and data within MySQL

2004-09-30 Thread Kerry Frater
Perhaps someone can provide me with some of his or her experiences if looking at MySQL to implement a “secure from structure manipulation” in a commercial application using MySQL. I am currently evaluating the possible migration of my app to MySQL as the basis. I already have tested the

Re: Secure logon from VB.net

2004-09-22 Thread Thomas Trutt
Thank you so much joe.. You have actually have been a great help... Again thank you so much for your help, Tom T At 04:44 PM 9/21/2004, you wrote: Thomas, Because the db is lower than version 4 and doesn't support secure connections, unless the db is on the same box as the web server,

Re: Secure logon from VB.net

2004-09-22 Thread Ian Gibbons
On 21 Sep 2004 at 10:14, Thomas Trutt wrote: > Hello all, > > Ok i know this may be a simple question but i need a little help. > I am writing a program in VB.net that uses MySQL as a backend. My net admin > wants the log on to be encrypted?? > > This is currently how i am connecting:

Re: Secure logon from VB.net

2004-09-21 Thread Joe Audette
Thomas, Because the db is lower than version 4 and doesn't support secure connections, unless the db is on the same box as the web server, then connection strings are already being passed between your web servers and the db accross the local network using clear text and those conne

RE: Secure logon from VB.net

2004-09-21 Thread Paul Maine
MySQL host server and forward port 3306. >From the client VB.net application, you connect to localhost( it uses port 3306 by default) and use the username and password for MySQL( on the remote host). The connection is sent securly through the tunnel and your problem is solved. Make secure

Re: Secure logon from VB.net

2004-09-21 Thread Thomas Trutt
Hi Joe, My understanding is, and please don't quite me on this one, is that it is a shared server.. If i'm right the server that my db will be running on also houses some large db's for our web services, here at Cornell. The data I'm holding is actually very, very low security, its tick

Re: Secure logon from VB.net

2004-09-21 Thread Joe Audette
Thomas, http://dev.mysql.com/doc/mysql/search.php?q=ssl&lang=en&charset=iso-8859-1 It looks like SSL/SSH are only available as of MySQL 4 or higher. Is your Net Admin really worried about eaves dropping of packets on the local network. It must be very sensitive data. If you already have a MySQ

Re: Secure logon from VB.net

2004-09-21 Thread Thomas Trutt
Thanks, Actually it is the transmission connection string he is worried about. I might have to go with an SSL connection and go from there.. The problems being that I'm not sure what software i have available to me on the server and what software i can add to the client machines.. this

RE: Secure logon from VB.net

2004-09-21 Thread Paul Maine
You can connect securly using ssh and perform port forwarding through the tunnel. Paul -Original Message- From: Joe Audette [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 21, 2004 2:32 PM To: [EMAIL PROTECTED] Subject: Re: Secure logon from VB.net Thomas, Are you sure that

Re: Secure logon from VB.net

2004-09-21 Thread Joe Audette
Thomas, Are you sure that encrypting the connection string is what your network admin means? When I hear someone say they want the logon encrypted I would think they mean store the password of a user encrypted in the db. That is, the application requires the user to logon and user info is st

Secure logon from VB.net

2004-09-21 Thread Thomas Trutt
Hello all, Ok i know this may be a simple question but i need a little help. I am writing a program in VB.net that uses MySQL as a backend. My net admin wants the log on to be encrypted?? This is currently how i am connecting: Public LocalSYS As New OdbcConnection("DRIVER={MySQL ODBC

RE: MySQL Secure Connection(e.g. SSL) Question

2004-08-26 Thread Greg . Cope
[EMAIL PROTECTED] > Sent: 25 August 2004 19:28 > To: [EMAIL PROTECTED] > Subject: Re: MySQL Secure Connection(e.g. SSL) Question > > > FYI, DBD::MySQL does support SSL. See > > http://search.cpan.org/~rudy/DBD-mysql-2.9004/lib/DBD/mysql.pm > > and search f

Re: MySQL Secure Connection(e.g. SSL) Question

2004-08-25 Thread Issac Goldstand
t;Joshua J. Kugler" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, August 25, 2004 8:25 PM Subject: Re: MySQL Secure Connection(e.g. SSL) Question > Something else to check out is Stunnel. It creates SSL tunnels between hosts > without requiring logins (b

Re: MySQL Secure Connection(e.g. SSL) Question

2004-08-25 Thread Eamon Daly
ay, August 24, 2004 11:12 AM Subject: RE: MySQL Secure Connection(e.g. SSL) Question > > I need to connect to a remote MySQL database from a PC using > > SSL. I would > > prefer to connect using perl DBD. Does anyone have a > > suggestion how I can > > accomplish

Re: MySQL Secure Connection(e.g. SSL) Question

2004-08-25 Thread Joshua J. Kugler
Something else to check out is Stunnel. It creates SSL tunnels between hosts without requiring logins (basically port redirection). Also, MySQL has built in SSL now, so you might want to look at that. j- k- On Wednesday 25 August 2004 08:10 am, [EMAIL PROTECTED] said something like: >

Re: MySQL Secure Connection(e.g. SSL) Question

2004-08-25 Thread SGreen
Something else I have done in the past was to use Cygwin to create an SSH session with the remote computer and use the remote computer's MySQL client/tools. If you are used to working in a "Terminal Server" session (I think they now call it "Remote Desktop Connectivity") it will feel very famil

RE: MySQL Secure Connection(e.g. SSL) Question

2004-08-24 Thread Greg . Cope
> I need to connect to a remote MySQL database from a PC using > SSL. I would > prefer to connect using perl DBD. Does anyone have a > suggestion how I can > accomplish this task or an alternative solution? What about stunnel or ssh tunnels and then use DBD::mysql on top. ISTR that DBD::mysql c

MySQL Secure Connection(e.g. SSL) Question

2004-08-24 Thread Paul Maine
I need to connect to a remote MySQL database from a PC using SSL. I would prefer to connect using perl DBD. Does anyone have a suggestion how I can accomplish this task or an alternative solution? Thank You -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubsc

Re: Secure Database Systems

2004-07-09 Thread David Dick
CPAN is your friend. for example; http://search.cpan.org/modlist/Security uru -Dave Sarah Tanembaum wrote: So, we can virtually use any database to do the job. It is really the function of the program to encrypt(save) and decrypt(read) the sensitive data. Does anyone knows such a program that can

Re: Secure Database Systems

2004-07-09 Thread mos
At 06:29 PM 7/8/2004, you wrote: Hi David, the link you provided is quite interesting. Is such database(translucent database) actually exist? Or is it just a concept? Thanks Sarah, These databases do exist. Transparent (translucent) encryption has been around for a while (at least on Windo

Re: Secure Database Systems

2004-07-09 Thread Mitch Pirtle
Rory McKinley wrote: Hi Sarah This is more of a PHP question than a MySQL question as to my mind while it is all possible, the bulk of the work would need to be done on the PHP side. Assuming that you don't have the time to write all the necessary code from scratch, you might want to look for a

Re: Secure Database Systems

2004-07-09 Thread Rory McKinley
Sarah Tanembaum wrote: We have 10 computers(5bros, 4sisters, and myself) plus 1 server with I maintained. The data should be synchronize/replicate between those computers. Well, so far it is easy, isn't it? Here's my question: a) How can I make sure that it secure so only authorized

Re: Secure Database Systems

2004-07-09 Thread David Dick
afaik the term "translucent database" applies to a regular database that has encrypted data in it. The main differences is in whether the encryption is one way only (ie. using a md5 hash of a name instead of the actual name) or reversible (using 3des to encrypt and decrypt the name). a good

Re: Secure Database Systems

2004-07-08 Thread Sarah Tanembaum
ynet.com/pub/a/network/2002/08/02/simson.html > > uru > > -Dave > > Sarah Tanembaum wrote: > > Here's my question: > > > > a) How can I make sure that it secure so only authorized person can > > modify/add/delete the information? Beside transaction log

Re: Secure Database Systems

2004-07-08 Thread David Dick
g/books/td/ http://www.oreillynet.com/pub/a/network/2002/08/02/simson.html uru -Dave Sarah Tanembaum wrote: Here's my question: a) How can I make sure that it secure so only authorized person can modify/add/delete the information? Beside transaction logs, are there any other method to trace any t

Re: Secure Database Systems

2004-07-08 Thread SGreen
It sounds to me that you need only 1 database on a secure server, behind a secured website. Each data entry operator (the members of your family?) would need to either access data entry pages on your site (via HTTPS or SSH or some other encrypted channel) or the database directly through SSH. If

Secure Database Systems

2004-07-08 Thread Sarah Tanembaum
I was wondering if it is possible to create a secure database system using MySQL/PHP combination? I have the following in mind: I wanted to store all my( and my brothers and sisters) important document information such as birth certificate, SSN, passport number, travel documents, insurance(car

How secure is your MySql

2004-06-13 Thread Robert Canary
http://www.oxid.it/ -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]

RE: Remote access FROM a secure server

2004-01-01 Thread Ugo Bellavance
> -Message d'origine- > De : Amer Neely [mailto:[EMAIL PROTECTED] > Envoyé : Thursday, January 01, 2004 3:07 PM > À : Larry Brown > Cc : MySQL List > Objet : Re: Remote access FROM a secure server > > > Larry Brown wrote: > > Have you tried to

Re: Remote access FROM a secure server

2004-01-01 Thread Amer Neely
ide a secure facility so I haven't messed with SSL for mysql, so for instance it may use a different port number etc. Just my 2 cents worth... Larry -Original Message- From: Amer Neely [mailto:[EMAIL PROTECTED] Sent: Thursday, January 01, 2004 2:07 PM To: MySQL Subject: Remote access FRO

RE: Remote access FROM a secure server

2004-01-01 Thread Larry Brown
Have you tried to telnet to port 3306 on the server from your local machine to the foreign server? It should give you some feedback as to why your connection is refused. If it times out, the server probably had 3306 blocked. I've not used remote servers other than inside a secure facility

Remote access FROM a secure server

2004-01-01 Thread Amer Neely
I have a Perl script running on a secure server (https) and am trying to access the mysql server on a different (unsecure) server. My ISP administrator has done the following: GRANT ALL ON database_name.* TO [EMAIL PROTECTED] IDENTIFIED BY 'password' Then he restarted the server. But

Re: secure automated access (was "Re: Backing up all databases")

2003-11-17 Thread Ed Leafe
On Monday, November 17, 2003, at 11:51 AM, Michael Stassen wrote: I'm glad this worked for you, but now I'm confused. The manual clearly indicates the use of quotes around the password. See . The "typical user option file" starts with [clien

Re: secure automated access (was "Re: Backing up all databases")

2003-11-17 Thread Michael Stassen
Ed Leafe wrote: On Monday, November 17, 2003, at 02:58 AM, Michael Stassen wrote: cat $HOME/.my.cnf [client] password="rootpassword" /usr/local/mysql/bin/mysql --defaults-file=$HOME/.my.cnf ERROR 1045: Access denied for user: '[EMAIL PROTECTED]' (Using password: YES) Oh. That changes things.

Re: secure automated access (was "Re: Backing up all databases")

2003-11-17 Thread Randall Perry
> >> In the case of root cron jobs then, you need a .my.cnf readable only by >> root in root's home. It should include >> >> [client] >> password="mysql_root_password" > > This is incorrect, unless the double quotes are part of the password. > Removing them so that the entry reads: > > [clien

Re: secure automated access (was "Re: Backing up all databases")

2003-11-17 Thread Randall Perry
>> >> Mac OS 10.2.3. Maybe Panther has an issue with the build? > > 10.2.3 is Jaguar, not Panther. Did you mean 10.3.x? As I said, I'm > running mysql 4.0.16 on Mac OS 10.2.8, and this works for me. I suppose > an issue with Panther is possible, though I'd be surprised if something > simple l

Re: secure automated access (was "Re: Backing up all databases")

2003-11-17 Thread Ed Leafe
On Monday, November 17, 2003, at 02:58 AM, Michael Stassen wrote: cat $HOME/.my.cnf [client] password="rootpassword" /usr/local/mysql/bin/mysql --defaults-file=$HOME/.my.cnf ERROR 1045: Access denied for user: '[EMAIL PROTECTED]' (Using password: YES) Oh. That changes things. The error says "U

Re: secure automated access (was "Re: Backing up all databases")

2003-11-17 Thread Michael Stassen
Randall Perry wrote: Mysterious. I assume `mysql -p` prompts you for root's password and works as expected, since without -p it says you're not using a password, rather than saying there's something wrong with the password. Yes, that works. When you tried the defaults-file option, did you use t

Re: secure automated access (was "Re: Backing up all databases")

2003-11-16 Thread Randall Perry
> Mysterious. I assume `mysql -p` prompts you for root's password and > works as expected, since without -p it says you're not using a password, > rather than saying there's something wrong with the password. > Yes, that works. > When you tried the defaults-file option, did you use the full pa

Re: secure automated access (was "Re: Backing up all databases")

2003-11-13 Thread Michael Stassen
Mysterious. I assume `mysql -p` prompts you for root's password and works as expected, since without -p it says you're not using a password, rather than saying there's something wrong with the password. When you tried the defaults-file option, did you use the full path? That is, mysql --def

Re: secure automated access (was "Re: Backing up all databases")

2003-11-13 Thread Randall Perry
on 11/13/03 3:57 PM, Michael Stassen at [EMAIL PROTECTED] wrote: > The client (mysql) reads the .my.cnf file when you start it, so > restarting mysqld and relogging in as root are not necessary. > > Let's see if I have this straight: While logged in as root, you created > .my.cnf in root's home d

Re: secure automated access (was "Re: Backing up all databases")

2003-11-13 Thread Michael Stassen
The client (mysql) reads the .my.cnf file when you start it, so restarting mysqld and relogging in as root are not necessary. Let's see if I have this straight: While logged in as root, you created .my.cnf in root's home directory. This file contains the password for the mysql user "root". Ye

Re: secure automated access (was "Re: Backing up all databases")

2003-11-13 Thread Randall Perry
I created the .my.cnf file in root's home dir, added the directives below setting the correct password. Restarted mysqld, re-logged in as root, but nothing works. It's not getting the password. > The simplest solution is to keep the password in the .my.cnf file in > your home directory. See http

Re: secure automated access (was "Re: Backing up all databases")

2003-11-12 Thread Randall Perry
That sounds like the solution. Thanks for your help, everyone. > The simplest solution is to keep the password in the .my.cnf file in > your home directory. See http://www.mysql.com/doc/en/Option_files.html > in the manual. > > In the case of root cron jobs then, you need a .my.cnf readable on

Re: secure automated access

2003-11-12 Thread David T-G
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mike -- ...and then Michael Stassen said... % % Mikael Fridh wrote: [And thank you to Mikael, too.] % % >On Wednesday 12 November 2003 17.15, David T-G wrote: % > % >>What if one user connects to the database as different users (as I do, in ... %

Re: secure automated access

2003-11-12 Thread Michael Stassen
Mikael Fridh wrote: On Wednesday 12 November 2003 17.15, David T-G wrote: % [client] % password="mysql_root_password" What if one user connects to the database as different users (as I do, in fact; sometimes all-db-root, sometimes one-db-root, sometimes read-only user)? Let's back this out

Re: secure automated access

2003-11-12 Thread Mikael Fridh
On Wednesday 12 November 2003 17.15, David T-G wrote: > % [client] > % password="mysql_root_password" > What if one user connects to the database as different users (as I do, in > fact; sometimes all-db-root, sometimes one-db-root, sometimes read-only > user)? Let's back this out of "root" and g

Re: secure automated access

2003-11-12 Thread David T-G
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Michael, et al -- ...and then Michael Stassen said... % % The simplest solution is to keep the password in the .my.cnf file in % your home directory. See http://www.mysql.com/doc/en/Option_files.html % in the manual. OK. % % In the case of root

Re: secure automated access (was "Re: Backing up all databases")

2003-11-12 Thread Michael Stassen
x27;t recall anything beyond that (including any sort of satisfactory answer). Those of you who store your passwords in the script file for all to see, how do you keep all from seeing them? And those of you who don't, what are you doing to stay secure? And those of you who have a different a

Re: secure automated access (was "Re: Backing up all databases")

2003-11-12 Thread David T-G
satisfactory answer). Those of you who store your passwords in the script file for all to see, how do you keep all from seeing them? And those of you who don't, what are you doing to stay secure? And those of you who have a different approach, what is it? TIA & HAND :-D - -- David

RE: Secure way of storing passwords in the database

2003-11-07 Thread Erik Osterman
=SHA1("$password"); $password is the user's input password. Regards, Erik Osterman http://osterman.com/ -Original Message- From: David T-G [mailto:[EMAIL PROTECTED] Sent: Friday, November 07, 2003 9:05 PM To: mysql users Cc: Luis Lebron Subject: Re: Secure way of stor

Re: Secure way of storing passwords in the database

2003-11-07 Thread David T-G
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Luis, et al -- ...and then Luis Lebron said... % % Any suggestions of a "secure" way of storing membership passwords (for a % website) in a mysql database? Should I use sha, aes, des??? Do you really need to be able to decrypt and get the

Re: Secure way of storing passwords in the database

2003-11-07 Thread Henning Heil
Luis Lebron wrote on 07.11.2003 15:22 Any suggestions of a "secure" way of storing membership passwords (for a website) in a mysql database? Should I use sha, aes, des??? thanks, Hi Luis, try md5 encryption for passwords in your application and write md5-encrypted values

Secure way of storing passwords in the database

2003-11-07 Thread Luis Lebron
Any suggestions of a "secure" way of storing membership passwords (for a website) in a mysql database? Should I use sha, aes, des??? thanks, Luis R. Lebron Sigmatech, Inc

Re: newbie Q: How to display Search Results in a secure way?

2003-10-17 Thread Jordan Morgan
Thanks millions Dan! That's exactly what I need. And I used your method and it worked beautifully! I'm so excited! Thanks again! Jordan Dan Greene wrote: > To make this back to being a MySQL question > > What if you used the encode or md5 functions when you retrieve the list of results, >

RE: newbie Q: How to display Search Results in a secure way?

2003-10-17 Thread Dan Greene
To make this back to being a MySQL question What if you used the encode or md5 functions when you retrieve the list of results, and then do your lookup on the item details by matching it to decoding the same id? ex. get list- select fid as open_fid, MD5(fid) as crypt_id from your_table wher

Re: newbie Q: How to display Search Results in a secure way?

2003-10-17 Thread Jordan Morgan
Thanks! That helped me get pass that error. However, maybe my logic is wrong, when I clicked the "Submit" button, it took me to the detail page of the last search result. I figured I'd need to move that input tag for the hidden value somewhere instead. Tried a few places but still didn't work. an

Re: newbie Q: How to display Search Results in a secure way?

2003-10-17 Thread Patrick Shoaf
I am not very familiar with php, but why are you using an echo within an echo statement? echo "$fname $lname$title"; why not try this echo "$fname $lname"; echo "$title"; echo ""; echo ""; Also, most languages require you to escape " when used within quotes. At 01:32 PM 10/17/2003, Jordan

newbie Q: How to display Search Results in a secure way?

2003-10-17 Thread Jordan Morgan
Hi, I'm still learning on this. Pls. excuse me if I simply overlooked something. Originally I had this: "; echo "$fname $lname$title"; echo ""; } ?> to list the search results and display them as a link which will take the user to a detailed page. However, the fid has to show up as part of t

Re: It is secure to access MySQL thru internet?

2003-08-29 Thread Hans van Harten
Flavio Tobias wrote: >>> I need to access a database thru internet. It is secure to do this >>> using MySql? >> Sure. If you use a secured connection. > What do you mean with secure connection, ssh? > How to configure this on MySql? I'ld think about SSL

RE: It is secure to access MySQL thru internet?

2003-08-29 Thread Dathan Vance Pattishall
X509 concepts. People who are already familiar with them can skip this part. -->-Original Message- -->From: Cal Evans [mailto:[EMAIL PROTECTED] -->Sent: Friday, August 29, 2003 1:39 PM -->To: Flavio Tobias -->Cc: [EMAIL PROTECTED] -->Subject: Re: It is secure to access MySQL t

Re: It is secure to access MySQL thru internet?

2003-08-29 Thread colbey
eswan, ssh port forwarding, etc.. But we have had great luck with vpn appliances which are getting very cheap nowdays... On Fri, 29 Aug 2003, Flavio Tobias wrote: > I need to access a database thru internet. It is secure to do this using MySql? > > > Thanks > Flavio Tobias > --

RE: It is secure to access MySQL thru internet?

2003-08-29 Thread James Moe
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, 29 Aug 2003 15:59:18 -0400, Fortuno, Adam wrote: > I need to access a database thru internet. It is secure to do this using > MySql? > If the database traffic is encrypted, yes. I do not know if that is an option in Mysql. If yo

Re: It is secure to access MySQL thru internet?

2003-08-29 Thread Cal Evans
ySQL host address is localhost because you are talking to your tunnel, not the server. That's all there is. Now you have a safe and encrypted tunnel to MySQL. HTH, =C= * * Cal Evans * http://www.eicc.com * We build IT solutions * Flavio Tobias said: > I need to access a database thru i

RE: It is secure to access MySQL thru internet?

2003-08-29 Thread Greg.Hering
Actually, Secure Shell is built on Secure Socket Layer. You generally speak of SSL with HTTPS connections. You can open an SSH session with a remote Unix box (or anything with an sshd running) then MySQL through that and it's encrypted. You can also create tunnels with SSH, but I

RE: It is secure to access MySQL thru internet?

2003-08-29 Thread Dathan Vance Pattishall
12:59 PM -->To: 'Flavio Tobias'; [EMAIL PROTECTED] -->Subject: RE: It is secure to access MySQL thru internet? --> -->Flavio, --> -->Sure. If you wanted to MySQL into a DB over the internet. I'd think -->ssh'ing -->would do the trick. This actually has nothing

RE: It is secure to access MySQL thru internet?

2003-08-29 Thread Fortuno, Adam
low-up with the documentation for your OS. If its not available through the OS, you'll need some sort of 3rd party utility. Regards, Adam -Original Message- From: Flavio Tobias [mailto:[EMAIL PROTECTED] Sent: Friday, August 29, 2003 3:53 PM To: Fortuno, Adam; [EMAIL PROTECTED] Subject: Re: It

Re: It is secure to access MySQL thru internet?

2003-08-29 Thread Flavio Tobias
What do you mean with secure connection, ssh? How to configure this on MySql? - Original Message - From: "Fortuno, Adam" <[EMAIL PROTECTED]> To: "'Flavio Tobias'" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Friday, August 29, 2003 2:17 P

RE: It is secure to access MySQL thru internet?

2003-08-29 Thread Fortuno, Adam
Sure. If you use a secured connection. A$ -Original Message- From: Flavio Tobias [mailto:[EMAIL PROTECTED] Sent: Friday, August 29, 2003 1:11 PM To: [EMAIL PROTECTED] Subject: It is secure to access MySQL thru internet? I need to access a database thru internet. It is secure to do this

It is secure to access MySQL thru internet?

2003-08-29 Thread Flavio Tobias
I need to access a database thru internet. It is secure to do this using MySql? Thanks Flavio Tobias

  1   2   >