What about using your firewall settings to deny access to the ndb_mgmd
port from machines other than itself and machines running ndbd's and
mysqld's ?
/Klaus
>
> That does not fix the problem. A malicious user can run his own version of
> ndb_mgm.
>
> Also, it seems that there is no check on the source IP address of the
> ndb_mgm client.
> I've just installed the ndb_mgm client on a box outside the cluster, and I
> can connect
> to the management server and bring down the cluster as a regular user.
>
> Len
>
> --
> MySQL Cluster Mailing List
> For list archives: http://lists.mysql.com/cluster
> To unsubscribe: http://lists.mysql.com/cluster?unsub=1
>
>
