dns - Why does the mysql % permission not work for all remotes on EC2? -
i had mysql admin issue permissions on % hosts.
- ec2_db launched ip 
10.55.142.100, dnsip-10-55-142-100.ec2.internal - ec2_web launched ip 
10.55.142.144, dnsip-10-55-142-144.ec2.internal - ec2_db , ec2_web in same security group access across db port (3306)
 - ec2_db has mysql db can reached locally , administered db root user.
 - ec2_db mysql db has remote user 
'my_user'@'%' identified password 'password' - a bash call mysql ec2_web fails: 
mysql -umy_user -p -h ip-10-55-142-100.ec2.internal, host references explicit ip, public dns, etc. 
step 6 seems fail because mysql db has wrong user permisions. needed this:
grant privileges on *.* 'my_user'@'ip-10-55-142-144.ec2.internal' identified password 'password'   i think % work remote server, did not find case.
please let me know why cannot use % here.   
as stands now, need add host-specific permissions every client in cluster, more overhead (despite improved security)
 
 
Comments
Post a Comment