dns - Why does the mysql % permission not work for all remotes on EC2? -
i had mysql admin issue permissions on %
hosts.
- ec2_db launched ip
10.55.142.100
, dnsip-10-55-142-100.ec2.internal
- ec2_web launched ip
10.55.142.144
, dnsip-10-55-142-144.ec2.internal
- ec2_db , ec2_web in same security group access across db port (3306)
- ec2_db has mysql db can reached locally , administered db root user.
- ec2_db mysql db has remote user
'my_user'@'%' identified password 'password'
- a bash call mysql ec2_web fails:
mysql -umy_user -p -h ip-10-55-142-100.ec2.internal
, host references explicit ip, public dns, etc.
step 6 seems fail because mysql db has wrong user permisions. needed this:
grant privileges on *.* 'my_user'@'ip-10-55-142-144.ec2.internal' identified password 'password'
i think %
work remote server, did not find case.
please let me know why cannot use %
here.
as stands now, need add host-specific permissions every client in cluster, more overhead (despite improved security)
Comments
Post a Comment