MySQL user permissions

[kalahari875]

kalahari875 [http://community.zenoss.org/people/kalahari875] created the discussion

"MySQL user permissions"

To view the discussion, visit: http://community.zenoss.org/message/75011#75011

--------------------------------------------------------------
Is there any documentation on what permissions are needed in MySQL for the MySQL users root and zenoss? We have a remote MySQL instance and want to grant only what is necessary. Many thanks; I'm not finding obvious guidance.
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/75011#75011]

Start a new discussion in zenoss-users at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[hydruid]

hydruid [http://community.zenoss.org/people/hydruid] created the discussion

"Re: MySQL user permissions"

To view the discussion, visit: http://community.zenoss.org/message/75002#75002

--------------------------------------------------------------
mysql -u root -e "CREATE USER 'zenoss'@'localhost' IDENTIFIED BY  'zenoss';"
mysql -u root -e "GRANT REPLICATION SLAVE ON *.* TO
'zenoss'@'localhost' IDENTIFIED BY PASSWORD
'*3715D7F2B0C1D26D72357829DF94B81731174B8C';"
mysql -u root -e "GRANT ALL PRIVILEGES ON zodb.* TO 'zenoss'@'localhost';"
mysql -u root -e "GRANT ALL PRIVILEGES ON zenoss_zep.* TO 'zenoss'@'localhost';"
mysql -u root -e "GRANT ALL PRIVILEGES ON zodb_session.* TO
'zenoss'@'localhost';"
mysql -u root -e "GRANT SELECT ON mysql.proc TO 'zenoss'@'localhost';"
mysql -u root -e "CREATE USER 'zenoss'@'%' IDENTIFIED BY  'zenoss';"
mysql -u root -e "GRANT REPLICATION SLAVE ON *.* TO 'zenoss'@'%'
IDENTIFIED BY PASSWORD '*3715D7F2B0C1D26D72357829DF94B81731174B8C';"
mysql -u root -e "GRANT ALL PRIVILEGES ON zodb.* TO 'zenoss'@'%';"
mysql -u root -e "GRANT ALL PRIVILEGES ON zenoss_zep.* TO 'zenoss'@'%';"
mysql -u root -e "GRANT ALL PRIVILEGES ON zodb_session.* TO 'zenoss'@'%';"
mysql -u root -e "GRANT SELECT ON mysql.proc TO 'zenoss'@'%';"
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/75002#75002]

Start a new discussion in zenoss-users at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[kalahari875]

kalahari875 [http://community.zenoss.org/people/kalahari875] created the discussion

"Re: MySQL user permissions"

To view the discussion, visit: http://community.zenoss.org/message/75012#75012

--------------------------------------------------------------
Thanks. The configuration also seems to need a MySQL root user that it retains as identified in http://community.zenoss.org/docs/DOC-13571 this post for the zodb-admin-user and zep-admin-user values. In your configuration, did you use the same 'zenoss' MySQL user for these values? Or is there also a root user with rights on all MySQL databases?

Best regards.
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/75012#75012]

Start a new discussion in zenoss-users at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[hydruid]

hydruid [http://community.zenoss.org/people/hydruid] created the discussion

"Re: MySQL user permissions"

To view the discussion, visit: http://community.zenoss.org/message/75003#75003

--------------------------------------------------------------
By default the MySQL root user has full privileges, so you should be good!
If you changed the root user's permission, you can use this command (might
need a few more though)

GRANT ALL ON *.* TO 'user'@'localhost';
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/75003#75003]

Start a new discussion in zenoss-users at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[kalahari875]

kalahari875 [http://community.zenoss.org/people/kalahari875] created the discussion

"Re: MySQL user permissions"

To view the discussion, visit: http://community.zenoss.org/message/75004#75004

--------------------------------------------------------------
I should clarify that I am trying to configure a remote MySQL instance and
would prefer to not give Zenoss rights over the whole installation if I
don't have to. :)
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/75004#75004]

Start a new discussion in zenoss-users at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]