Torgeir Berg wrote:

techlists@comcast.net wrote:

...

After downloading and untarring the Drupal software, I moved all files per the Drupal install instructions into /var/www/html.

I ran the next line in the installation instructions:

mysqladmin -u dba_user -p create drupal

It prompted for a password; I entered a password and got the following response:

mysqladmin: CREATE DATABASE failed; error: 'Access denied for user ''@'localhost' to database 'drupal''

The 'dba_user' is used in the example, but you'd probably want to use the MySQL 'root' account when setting up the drupal database.

From INSTALL.txt:

"In the following examples, 'dba_user' is an example MySQL user which has the CREATE and GRANT privileges. Use the appropriate user name for your system."

regards,

Torgeir

How do you create a user in MySQL? (let me reiterate I'm just as new at MySQL as I am at Drupal).

Or does MySQL use operating system level user accounts? I've tried "mysql", "dba_user", and "root" and none of them have worked. MySQL only added the "mysql" account on its own.

Paul

Paul Greene wrote:

How do you create a user in MySQL? (let me reiterate I'm just as new at MySQL as I am at Drupal).

Or does MySQL use operating system level user accounts? I've tried "mysql", "dba_user", and "root" and none of them have worked. MySQL only added the "mysql" account on its own.

MySQL has it's own user database. On most standard MySQL setups the superuser is 'root' with no password initially set.

mysqladmin -u root create name_of_db

hth

Torgeir

El Domingo, 24 de Abril de 2005 21:43, Eric Scouten escribió:

If you've been given a username and password by someone else who runs the MySQL server, you *must* put a space between the -u and the user name and you must *not* put a space between the -p and the password. (Yes, I know this is confusing.) Thus:

$ mysql -u whoami -psecret drupal

I really discourage this. If someone in the machine reads your .bash_history (asuming you use bash), or runs px in the machine, can steal your password.

In all mysql versions I've used, running just "-u foo -p" will ask your password interactively, solving the problem from above.

Thanks to Eric, Torgeir, Alejandro, Djun, and Gerhard,

Between your comments, and a "MySQL in 24 Hours" book, I got the databases created, and added a couple of user accounts; one with full privileges, and one with select and insert (is select and insert enough privileges to give a regular user?).

I do intend to put this online at some point, so security is a concern.

Thanks,

Paul

Eric Scouten wrote:

Paul Greene wrote:

...

...

...

I ran the next line in the installation instructions:

mysqladmin -u dba_user -p create drupal

It prompted for a password; I entered a password and got the following response:

mysqladmin: CREATE DATABASE failed; error: 'Access denied for user ''@'localhost' to database 'drupal''

...

How do you create a user in MySQL? (let me reiterate I'm just as new at MySQL as I am at Drupal).

Or does MySQL use operating system level user accounts? I've tried "mysql", "dba_user", and "root" and none of them have worked. MySQL only added the "mysql" account on its own.

As Torgeir said, MySQL maintains its own list of user accounts that is unrelated to the Unix system's user accounts.

If you've been given a username and password by someone else who runs the MySQL server, you *must* put a space between the -u and the user name and you must *not* put a space between the -p and the password. (Yes, I know this is confusing.) Thus:

$ mysql -u whoami -psecret drupal

assuming username "whoami", password "secret", database name "drupal".

If you are running your own machine, you probably have root access to MySQL which you can then use to create new MySQL accounts. It would look something like this:

$ mysql -u root

mysql> create database mysite;
Query OK, 1 row affected (0.04 sec)

mysql> grant all on mysite.* to whoami@localhost identified by 

"secret"; Query OK, 0 rows affected (0.22 sec)

mysql> exit;
Bye

$ mysql -u whoami -psecret mysite

The "grant all" command creates a new user and password and grants that user all permissions on the specified database.

Hope this helps...

-Eric

On 26 Apr 2005, at 3:51 PM, Andrew Cohill wrote:

On Apr 26, 2005, at 4:27 PM, Paul Greene wrote:

...

Between your comments, and a "MySQL in 24 Hours" book, I got the databases created, and added a couple of user accounts; one with full privileges, and one with select and insert (is select and insert enough privileges to give a regular user?).

The user associated with the Drupal database will require update and delete privileges as well, I think, at a minimum. Someone closer to the database could probably give a more definitive answer.

I've set up numerous Drupal sites, and have never created more than one user (with full privileges). That's all you will ever need if you are just running Drupal.

This is probably dangerous, from a separation of privileges perspective. The point is that if your Drupal installation is compromised, then the attacker could at a minimum drop your database, and in fact create much more havoc by an escalation of privileges attack of the type which just forced the recent security upgrade of MySQL (You have upgraded, haven't you?)

In fact, it would be best to limit delete, insert, update privileges to tables that actually need to have rows deleted, inserted, updated by Drupal. That way, even if Drupal is cracked, at worst your content will be destroyed or defaced. Of course you should have regular backups :)

Andrew

Regards, Djun