List:General Discussion« Previous MessageNext Message »
From:Paul DuBois Date:May 6 2003 6:06pm
Subject:RE: empty host in user table
View as plain text  
At 10:56 -0700 5/6/03, Jennifer Goodie wrote:
>That's not how I read the docs, but I am sort of sleepy.
>
>Here's the page
>http://www.mysql.com/doc/en/Connection_access.html
>
>And here is what I read...
>"Values in the user table scope fields may be specified as follows:
><snip>
>A blank Host value means that the privilege should be anded with the entry
>in the host table that matches the given host name. You can find more
>information about this in the next chapter. "

I believe that is incorrect.  (And indeed, if you look at the next chapter
it discusses the combination of the db and host tables, not the user and host
tables.)

I'll check into this.  Thanks for pointing it out.

>
>I think that in order for the anding to work you need a blank host in the
>user and db tables, but I can't quite remember and would need to look into
>it, but I don't really have time for that right now.
>
>>  -----Original Message-----
>>  From: Paul DuBois [mailto:paul@stripped]
>>  Sent: Tuesday, May 06, 2003 10:51 AM
>>  To: Jennifer Goodie; Thomas Walter; mysql@stripped
>>  Subject: RE: empty host in user table
>>
>>
>>  At 10:38 -0700 5/6/03, Jennifer Goodie wrote:
>>  >An empty host in the user table means that permissions get anded with the
>>
>>  The db table, not the user table.
>>
>>  >appropriate entry in the hosts table.  We use this method
>>  because our server
>>  >set up is very complicated, it seems most people don't.  I do
>>  not know what
>>  >the expected action would be if the hosts table is empty.  I don't think
>>  >that scenerio is a standard set up.  The following two pages go
>>  into detail
>>  >on how mySQL uses the grant tables to decide what a user can do.  Reading
>>  >them should answer your questions.
>>  >
>>  >http://www.mysql.com/doc/en/Connection_access.html
>>  >http://www.mysql.com/doc/en/Request_access.html
>>  >
>>  >>  -----Original Message-----
>>  >>  From: Thomas Walter [mailto:Thomas.Walter@stripped]
>>  >>  Sent: Tuesday, May 06, 2003 5:22 AM
>>  >>  To: mysql@stripped
>>  >>  Subject: empty host in user table
>>  >>
>>  >>
>>  >>  I use the grant tables in the following way:
>>  >>  The host and db table are empty.
>>  >>  Most of the users are supposed to be able to connect from any host so
>>  >>  for most users the host colunm in the user table is set to '%'.
>>  >>  Accidently, it happened that in some user table's rows the
>>  host name has
>>  >>  been set to '' (empty name) by an application's bug or a faulty
>>  >>  administrator's action.
>>  >>
>>  >>  Now it seems to me that the empty host name '' is treated the same
> way
>>  >>  as '%', i.e. a user with en empty host name can connect from any
> host.
>>  >>
>>  >>  Is this true? If yes: Is this the intentional use of empty host
> names?
>>  >>
>>  >>  Thanks for any help,
>>  >>
>>  >  > Thomas
>>
>>
>>  --
>>  Paul DuBois
>>  http://www.kitebird.com/
>>  sql, query
>>
>
>
>--
>MySQL General Mailing List
>For list archives: http://lists.mysql.com/mysql
>To unsubscribe:    http://lists.mysql.com/mysql?unsub=1

Thread
empty host in user tableThomas Walter6 May
  • RE: empty host in user tableJennifer Goodie6 May
    • RE: empty host in user tablePaul DuBois6 May
      • RE: empty host in user tableJennifer Goodie6 May
        • RE: empty host in user tablePaul DuBois6 May