creating a user for phpmyadmin

[JoeHill]

Zbigniew Koziol wrote: 

> On Sun, Nov 9, 2008 at 1:43 PM, JoeHill <joehill-R6A+fiHC8nRWk0Htik3J/w at public.gmane.org> wrote:
> >
> > Wading my way through setting up my first mysql database, and I've connected
> > with phpmyadmin, but before I go any further I want to make sure I get the
> > user creation part exactly right.
> >
> > I'm getting the warning from phpmyadmin/mysql that "Your configuration file
> > contains settings (root with no password) that correspond to the default
> > MySQL privileged account. Your MySQL server is running with this default,
> > is open to intrusion, and you really should fix this security hole."
> >
> > I've read some articles on setting up the first user, but they were based
> > on a totally manual installation and configuration, so I'm not sure if
> > these are appropriate. Is it advisable to edit the phpmyadmin config
> > manually, or is there an operation within the web interface that I'm not
> > seeing?
>
> JoeHill, dont be afraid to edit files manually.

Not so much afraid of config files, just want to make sure that they're edited
_properly_. None of the instructions I found matched my situation, in fact the
most detailed ones were aimed at phpmyadmin on Windows, which does not exactly
fill me with confidence.

> You are probably on your home computer that is not broadly open to the
> Internet, possibly besides a router (iptables are helpfull anyway;
> "man iptables"). If so, you do not need to care a lot about security.

Eventually this will be accessible from the 'Net, though.

> MySQL should have better be running as a less privileged user, not as root.
> 
> Tend to use the console, not these funny web interfaces.
> 
> Besides that not much more on my side. I do not remember details of
> how phpmyadmin works.
> 



-- 
Joe
--
The Toronto Linux Users Group.      Meetings: http://gtalug.org/
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists