View unanswered posts    View active topics

All times are UTC - 6 hours





Post new topic Reply to topic  [ 6 posts ] 
Print view Previous topic   Next topic  
Author Message
Search for:
PostPosted: Sat May 19, 2007 6:47 pm 
Offline
Joined: Fri Oct 20, 2006 12:04 pm
Posts: 905
Location: LA, CA
I'm trying to setup a MBE/SBE config. So reading the LinHessection and this thread sends me to comment out 'skip-networking' in /etc/mysql/my.cnf but I only see the following.

Code:
skip-external-locking
#
# Instead of skip-networking the default is now to listen only on
# localhost which is more compatible and is not less secure.
bind-address            = 127.0.0.1


Does the LinHes setup have (need) an update? or am I missing something? Do I need to change the bind-address? or leave the file as is?

TIA


Top
 Profile  
 
 Post subject:
PostPosted: Sat May 19, 2007 7:18 pm 
Offline
Joined: Thu Mar 25, 2004 11:00 am
Posts: 9551
Location: Arlington, MA
A quick search for skip-networking turned up this...
http://mysettopbox.tv/phpBB2/viewtopic.php?t=14890&highlight=skipnetworking


Top
 Profile  
 
 Post subject:
PostPosted: Sat May 19, 2007 10:12 pm 
Offline
Joined: Fri Oct 20, 2006 12:04 pm
Posts: 905
Location: LA, CA
THanks for steering me in the right direction. This wiki entry was really current and helpful too. I was having problems with the 'skip-networking' entry and the location change from /usr/share/mythtv/mysql.txt to /etc/mythtv/mysql.txt After these changes were made, I was able to connect just fine.


Top
 Profile  
 
 Post subject:
PostPosted: Sun May 20, 2007 9:01 am 
Offline
Joined: Wed May 09, 2007 8:47 pm
Posts: 367
Location: Minnesota- Brrrrr!
I had to comment out the bind-address line to enable tapeworm to access the database from my M$ machine:

Code:
skip-external-locking
#
# Instead of skip-networking the default is now to listen only on
# localhost which is more compatible and is not less secure.
# bind-address            = 127.0.0.1


What is the implication \ consequences of this change. I think that it means any IP address can now access the database. Could I do this if I wanted to increase security:

Code:
skip-external-locking
#
# Instead of skip-networking the default is now to listen only on
# localhost which is more compatible and is not less secure.
bind-address            = 192.168.2.XXX
bind-address            = 192.168.2.XXX
bind-address            = 192.168.2.XXX

_________________
R7.3: 0.22.20091023-1, Hauppauge PVR-500 (Philips FQ1236A MK4), Gigabyte Gigabyte EG45M-UD2H, E5200 2.4Ghz, 2GB RAM, NVIDIA GEFORCE 256MB


Top
 Profile  
 
 Post subject:
PostPosted: Sun May 20, 2007 9:24 am 
Offline
Joined: Wed Nov 16, 2005 8:55 pm
Posts: 1381
Location: Farmington, MI USA
gatorback wrote:
I had to comment out the bind-address line to enable tapeworm to access the database from my M$ machine:

Code:
skip-external-locking
#
# Instead of skip-networking the default is now to listen only on
# localhost which is more compatible and is not less secure.
# bind-address            = 127.0.0.1


What is the implication \ consequences of this change. I think that it means any IP address can now access the database. Could I do this if I wanted to increase security:

Code:
skip-external-locking
#
# Instead of skip-networking the default is now to listen only on
# localhost which is more compatible and is not less secure.
bind-address            = 192.168.2.XXX
bind-address            = 192.168.2.XXX
bind-address            = 192.168.2.XXX
Nope, that won't work. See http://dev.mysql.com/doc/refman/5.0/en/ ... erver.html for more details.


Top
 Profile  
 
 Post subject:
PostPosted: Sun May 20, 2007 9:44 am 
Offline
Joined: Thu Mar 25, 2004 11:00 am
Posts: 9551
Location: Arlington, MA
The bottom line is that bind-address is not primarily intended as an access control mechanism. As far as I can tell it was added as a fix for servers with multiple NICs and/or multiple IP addresses (what are often called "multi-homed" servers). It simply tells the mysql instance which IP address to listen on (bind to). Binding to the loopback interface prevents outside access as almost a side effect...

BTW - I've added known change 6.4 to the hints to cover this issue.


Top
 Profile  
 

Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 6 posts ] 


All times are UTC - 6 hours




Who is online

Users browsing this forum: No registered users and 16 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Jump to:  
Powered by phpBB® Forum Software © phpBB Group

Theme Created By ceyhansuyu