|
Home > Archive > MySQL Server Forum > March 2005 > Re: I just ran /usr/bin/mysql_install_db and it told me to set a
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Re: I just ran /usr/bin/mysql_install_db and it told me to set a
|
|
| Bill Karwin 2005-03-31, 7:01 am |
| MLH wrote:
> ==> I am slightly confused about the return values from
> the two ANONYMOUS logins shown above. I would have
> expected the USER( ) function to return a name like
> anonymous@localhost instead of mlh or dewey at localhost.
> Is that considered normal?
On Linux, yes. The "anonymous" login functionality allows you to
connect without providing a password. MySQL detects your username as
your Linux login, and the USER() function returns that string. MySQL
"trusts" that you have been authenticated by the operating system if you
got far enough to run the 'mysql' command.
This isn't very reliable or secure by many people's standards, though.
So for servers where security is considered important, one can disable
anonymous logins on their MySQL installations.
Read http://dev.mysql.com/doc/mysql/en/d...privileges.html for more
information on that topic.
Regards,
Bill K.
| |
| Bill Karwin 2005-03-31, 8:01 pm |
| Bill Karwin wrote:
> On Linux, yes. The "anonymous" login functionality allows you to
> connect without providing a password.
That's wrong. The anonymous login is not _necessarily_ passwordless,
though that is the configuration that ships with the product.
Sorry for the misinformation,
Bill K.
|
|
|
|
|