From: Daevid Vincent
Date: October 16 2010 1:06am
Subject: RE: How do I GRANT SELECT to mysql.time_zone_name for ANYONE?!
List-Archive: http://lists.mysql.com/mysql/223353
Message-Id: <9896D8B386C94470BA2DE0A690E52B88@mascorp.com>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit

 

> -----Original Message-----
> From: Jesper Wisborg Krogh [mailto:jesper@stripped] 
> Sent: Friday, October 15, 2010 5:54 PM
> To: MY SQL Mailing list
> Subject: Re: How do I GRANT SELECT to mysql.time_zone_name 
> for ANYONE?!
>
> > Any user can get into mysql, it's what they can do after that's the
> > interesting part.
> 
> Sorry, I'm not sure what you mean. Unless a username and host  
> combination matches a record in the mysql.user table, then the user  
> cannot log into the server.
> 
> $ mysql -u random_user -p
> Enter password:
> ERROR 1045 (28000): Access denied for user  
> 'random_user'@'localhost' (using password: NO)
> 
> $ mysql -u random_user -p
> Enter password:
> ERROR 1045 (28000): Access denied for user  
> 'random_user'@'localhost' (using password: YES)

Don't use the -p password prompt and you get into mysql...

developer@mypse:~$ mysql -u random_user
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 2393
Server version: 5.0.51a-3ubuntu5.7 (Ubuntu)
(random_user@localhost) [(none)]> show databases;
+--------------------+
| Database           |
+--------------------+
| information_schema |
| mysql              |
+--------------------+
2 rows in set (0.00 sec)