controluser
This commit is contained in:
Marc Delisle
@@ -5,6 +5,10 @@ phpMyAdmin - Changelog
|
||||
$Id$
|
||||
$Source$
|
||||
|
||||
2002-03-07 Marc Delisle <lem9@users.sourceforge.net>
|
||||
* Documentation.html, config.inc.php3, libraries/common.lib.php3:
|
||||
stduser/stdpass are now controluser/controlpass
|
||||
|
||||
2002-03-04 Marc Delisle <lem9@users.sourceforge.net>
|
||||
* libraries/display_tbl.lib.php3, undefined variable
|
||||
|
||||
|
||||
@@ -209,8 +209,17 @@
|
||||
before uploading them to your server.
|
||||
</p>
|
||||
|
||||
<p>
|
||||
<font color="#bb0000">Documentation warning:</font> when you see in this
|
||||
document a <tt>.php3</tt> file extension, please transpose to <tt>.php</tt>
|
||||
if you are using a kit with files having this extension.
|
||||
</p>
|
||||
|
||||
<p><b>Quick Install:</b></p>
|
||||
<ol>
|
||||
<li> Use a distribution kit with the files having the extension
|
||||
(.php3 or .php) depending on the way your web/PHP server interprets
|
||||
those extensions.</li>
|
||||
<li> Untar or unzip the distribution (be sure to unzip the subdirectories):
|
||||
<tt>tar xzvf phpMyAdmin_x.x.x.tar.gz</tt> in your webserver's
|
||||
document root.</li>
|
||||
@@ -250,33 +259,32 @@
|
||||
|
||||
<li>Http and cookie authentication modes are secure: the MySQL password
|
||||
does not need to be set in the phpMyAdmin configuration file. (except
|
||||
for the "standard user" -see the Configuration section-).
|
||||
for the "controluser" -see the Configuration section-).
|
||||
<br />
|
||||
In cookie mode, we send the password in a temporary cookie, so most
|
||||
browsers should not store the password in their cookie file.
|
||||
<br /><br /></li>
|
||||
|
||||
<li>
|
||||
For 'http' and 'cookie' modes, phpMyAdmin needs a stduser that has
|
||||
For 'http' and 'cookie' modes, phpMyAdmin needs a controluser that has
|
||||
<b>only</b> the <tt>SELECT</tt> privilege on the <i>mysql.user (all
|
||||
columns except "Password")</i>, <i>mysql.db (all columns)</i>
|
||||
& <i>mysql.tables_priv (all columns except "Grantor"
|
||||
& "Timestamp") </i>tables.<br />
|
||||
You must specify the details for the stduser in the
|
||||
You must specify the details for the controluser in the
|
||||
<i>config.inc.php3</i> file under the
|
||||
<tt>$cfgServers[n]['stduser']</tt> &
|
||||
<tt>$cfgServers[n]['stdpass']</tt> settings.<br />
|
||||
To create the control account (<tt><stduser></tt> and
|
||||
<tt><stdpass></tt> have to be replaced by your own values, of
|
||||
course):<br />
|
||||
<tt>$cfgServers[n]['controluser']</tt> &
|
||||
<tt>$cfgServers[n]['controlpass']</tt> settings.<br />
|
||||
This example assumes you want to use <tt>pma</tt> as the controluser
|
||||
and <tt>pmapass</tt> as the controlpass:<br />
|
||||
<table border="0">
|
||||
<tr>
|
||||
<td> </td>
|
||||
<td>
|
||||
<tt>GRANT USAGE ON mysql.* TO '<stduser>'@'localhost' IDENTIFIED BY '<stdpass>';</tt><br />
|
||||
<tt>GRANT SELECT (Host, User, Select_priv, Insert_priv, Update_priv, Delete_priv, Create_priv, Drop_priv, Reload_priv, Shutdown_priv, Process_priv, File_priv, Grant_priv, References_priv, Index_priv, Alter_priv) ON mysql.user TO '<stduser>'@'localhost';</tt><br />
|
||||
<tt>GRANT SELECT ON mysql.db TO '<stduser>'@'localhost';</tt><br />
|
||||
<tt>GRANT SELECT (Host, Db, User, Table_name, Table_priv, Column_priv) ON mysql.tables_priv TO '<stduser>'@'localhost';</tt>
|
||||
<tt>GRANT USAGE ON mysql.* TO 'pma'@'localhost' IDENTIFIED BY 'pmapass';</tt><br />
|
||||
<tt>GRANT SELECT (Host, User, Select_priv, Insert_priv, Update_priv, Delete_priv, Create_priv, Drop_priv, Reload_priv, Shutdown_priv, Process_priv, File_priv, Grant_priv, References_priv, Index_priv, Alter_priv) ON mysql.user TO 'pma'@'localhost';</tt><br />
|
||||
<tt>GRANT SELECT ON mysql.db TO 'pma'@'localhost';</tt><br />
|
||||
<tt>GRANT SELECT (Host, Db, User, Table_name, Table_priv, Column_priv) ON mysql.tables_priv TO 'pma'@'localhost';</tt>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
@@ -287,7 +295,7 @@
|
||||
<tr>
|
||||
<td> </td>
|
||||
<td>
|
||||
<tt>GRANT SELECT, INSERT, DELETE ON <bookmark_db>.<bookmark_table> TO '<stduser>'@'localhost';</tt>
|
||||
<tt>GRANT SELECT, INSERT, DELETE ON <bookmark_db>.<bookmark_table> TO 'pma'@'localhost';</tt>
|
||||
</td>
|
||||
</tr>
|
||||
</table>
|
||||
@@ -330,7 +338,7 @@
|
||||
<li>This mode is the less secure one because it requires you to fill the
|
||||
<tt>$cfgServers[n]['user']</tt> and <tt>$cfgServers[n]['password']</tt>
|
||||
fields.<br />
|
||||
But usually you don't need to setup a "standard user" here:
|
||||
But you don't need to setup a "controluser" here:
|
||||
using the <tt>$cfgServers[n]['only_db']</tt> might be enough.<br />
|
||||
In the ISP FAQ section, there is an entry explaining how to protect
|
||||
your configuration file.<br /></li>
|
||||
@@ -416,8 +424,8 @@
|
||||
</dd>
|
||||
|
||||
<dt>
|
||||
<b>$cfgServers[n]['stduser']</b> string<br />
|
||||
<b>$cfgServers[n]['stdpass']</b> string
|
||||
<b>$cfgServers[n]['controluser']</b> string<br />
|
||||
<b>$cfgServers[n]['controlpass']</b> string
|
||||
</dt>
|
||||
<dd>
|
||||
When using http or cookie authentication modes (or 'config'
|
||||
@@ -431,10 +439,12 @@
|
||||
Please see the <a class="navigation" href="#setup">install section</a>
|
||||
on "Using http authentication" for more information.
|
||||
<br /><br />
|
||||
Note that if you try login to phpMyAdmin with this "stduser",
|
||||
Note that if you try login to phpMyAdmin with this "controluser",
|
||||
you could get some errors, depending the exact privileges you gave to
|
||||
the "stduser". phpMyAdmin does not support a direct login
|
||||
with the "stduser".
|
||||
the "controluser". phpMyAdmin does not support a direct login
|
||||
with the "controluser".
|
||||
<br /><br />
|
||||
In versions before 2.2.5, those were called stduser/stdpass.
|
||||
<br /><br />
|
||||
</dd>
|
||||
|
||||
@@ -538,10 +548,11 @@
|
||||
</li>
|
||||
</ul><br />
|
||||
|
||||
Note that <tt>stduser</tt> must have <tt>SELECT</tt>, <tt>INSERT</tt>
|
||||
Note that <tt>controluser</tt> must have <tt>SELECT</tt>, <tt>INSERT</tt>
|
||||
and <tt>DELETE</tt> privileges on the bookmark table.
|
||||
Here is a query to set up those privileges:<br />
|
||||
<tt>GRANT SELECT,INSERT,DELETE ON <bookmarkdb>.<bookmarktable> to 'stduser'@localhost;</tt>
|
||||
Here is a query to set up those privileges (using "pma" as
|
||||
the controluser:<br />
|
||||
<tt>GRANT SELECT,INSERT,DELETE ON <bookmarkdb>.<bookmarktable> to 'pma'@localhost;</tt>
|
||||
<br /><br />
|
||||
</dd>
|
||||
|
||||
@@ -633,7 +644,7 @@
|
||||
|
||||
<dt><b>$cfgAllowUserDropDatabase </b>boolean</dt>
|
||||
<dd>
|
||||
Defines whether standard users (non administrator) are allowed to
|
||||
Defines whether normal users (non-administrator) are allowed to
|
||||
delete their own database or not. If set as FALSE, the link "Drop
|
||||
Database" will not be shown, and even a "DROP DATABASE
|
||||
mydatabase" will be rejected. Quite practical for ISP's with many
|
||||
@@ -1238,8 +1249,8 @@
|
||||
</p>
|
||||
<ul>
|
||||
<li>
|
||||
<tt>$cfgServers[n]['stduser']</tt> and/or
|
||||
<tt>$cfgServers[n]['stdpass']</tt> are wrong.
|
||||
<tt>$cfgServers[n]['controluser']</tt> and/or
|
||||
<tt>$cfgServers[n]['controlpass']</tt> are wrong.
|
||||
</li>
|
||||
<li>
|
||||
The username/password you specify in the login-dialog are invalid.
|
||||
|
||||
Reference in New Issue
Block a user