The process of identifying the party logging into a system.

learn more… | top users | synonyms

8
votes
4answers
53k views

MySQL error: Access denied for user 'a'@'localhost' (using password: YES)

I use the root account created the account 'a'@'%'. But I can't use the it to connect to MySQL server when I specify the host parameter. I can successfully connect without the -h parameter. Please see ...
8
votes
3answers
7k views

Audit logins on MySQL database

Is there a way to audit logins to MySQL? I'd like to be able to create a username for each employee and thereby create an audit trail of logins. However, googling has turned up no good results. The ...
1
vote
1answer
724 views

Secure method beside phpMyAdmin for remote mysql

Recently, one of my centos linux servers was hacked and the cause of due to phpMyAdmin. It was said due to this problem PhpMyAdmin vulnerability CVE-2011-2505 ...
2
votes
1answer
105 views

mysqladmin user account not secure?

I still playing with my own DB trying to learn and saw this: I could change the root password without any problem at all... If I'm in the server I can create an algorithm to start testing password ...
8
votes
4answers
785 views

Is splitting a 'users' table for authentication purposes a good idea?

Suppose I have a user table in my site in which there are around 2-3 Million users (records) in the table. For speeding up my login process, is it a good approach to split my user table, one for ...
4
votes
2answers
8k views

SQL 2008 R2 creates user/schema when Windows user creates tables

We added a server login and database user that map a Windows Group to a SQL 2008 R2 instance using the following script, with the names changed for anonymity: USE master go CREATE LOGIN ...
4
votes
2answers
22k views

Grant table privileges to a user connecting from any host

I have a user account - let's call it 'wordpress' - that I need to allow to access a few catalog tables in another e-commerce database on the same server. I've configured the user with three host ...
1
vote
2answers
896 views

Any security related reasons to prefer Windows Authentication over Sql Server Authentication?

This is a rather short question: When using Microsoft SQL Server (version 2005 and newer), are there any security related reasons to prefer Windows Authentication over SQL Server Authentication? ...
4
votes
1answer
3k views

Windows Authentication for a non-local non-domain Login

I have SQL Server 2008 R2 installed on a Windows Server 2008 R2 box. There is no domain in the network. Is there any way for me to add a Windows Login on SQL Server for a non-local and non-domain ...
3
votes
1answer
2k views

postgres and passwordless authentication

We have users for out postgres database and none have passwords... Do not know the history behind it. When I try to use clients to connect to these databases, for instance, pgadmin III, the ...
1
vote
1answer
47 views

Proxy authentication for PostgeSQL

The following seems likely to be a fairly common situation, but I haven't seen any solutions. I have a PostgreSQL database containing views that are specific to the $user, in order to restrict data ...
1
vote
1answer
1k views

Error in login in with root user in new mysql server

I've installed a MySQL server in CentOS 6.2 machine +-------------------------+---------------------+ | Variable_name | Value | ...
1
vote
2answers
641 views

Mysql master-master permission replication issue

I came to know it's safe to replicate mysql database to have the users and permissions replicated, from a post in ServerFault is-it-ok-to-replicate-mysql-db. I have setup master-master replication ...
0
votes
2answers
987 views

Secure way to connect: Windows Authentication or SQL Server Authentication and why?

Which is the best way to create a connection string for SQL Server? Should I be using a trusted connection string (windows authentication) or an untrusted connection string (sql server ...