I-MariaDB nge-VPN: iyiphi i-user@host eseyibona iseva?
I-akhawunti ikhethwa ngumsebenzisi kanye nosokhaya ndawonye. Thola umthombo iseva eyawubona, funda i-CURRENT_USER(), bese ulungisa lowo mugqa, hhayi imvume.
Thayipha igama elifanayo lomsebenzisi kusuka emikhondweni emibili ehlukene futhi i-MariaDB ingase ikuqinisekise njengamakhawunti amabili ahlukene. Amakhawunti akhiwe ngumsebenzisi nosokhaya ndawonye, ngakho 'reporter'@'localhost' no-'reporter'@'10.90.0.23' bangimigqa ehlukene enezimfihlo ezihlukene nezimvume ezihlukene. Nge-VPN, umbuzo othakazelisayo awukho ekutheni umsebenzisi wabhala liphi igama, kodwa ukuthi iyiphi ikheli lomthombo iseva eyibona.
Thola umthombo iseva ewubona ngempela
Sebenza ubheka emuva kusukela kusokhaya wesizindalwazi, hhayi ku-laptop. Ikheli umklami acabanga ukuthi unalo lingenye yezinto ezimbalwa ezingenzeka:
| Path | Source MariaDB sees |
|---|---|
| Routed tunnel, no translation | The client's inner VPN address |
| Gateway source translation | The gateway's translated address |
| SSH local forward | The SSH server's address |
| Public exit, no tunnel | Whatever the ISP handed out |
Sebenzisa ubufakazi baseceleni kweseva ukunquma lokho. Ilogi yokuxhumana, uhlu lwezikhathi ezisebenzayo noma ukufakwa kwesikhashana kulogi evamile kukhombisa ikheli iseva eyamukele. I-IP yomphakathi ye-laptop evela kusiphequluli iyiqiniso elinye futhi ngokuvamile iyadukisa.
Fanisa i-akhawunti i-MariaDB eyikhethile
Ukukhethwa kwe-akhawunti kulandela ukuhleleka okubhaliwe hhayi inhlanganisela yezimvume. Ukufana okunembile kosokhaya kuphambi kophawu lwedlanzana, futhi imigqa yomsebenzisi ongaziwa ibamba iqhaza ekufanisweni ngezindlela ezimangaza abacabanga ukuthi igama lodwa liyanquma. Iseva ikhetha umugqa owodwa; ayihlanganisi amalungelo awo wonke umugqa onegama elifanayo. Ukufunda ireferensi kanye kuyabiza ukwedlula intambama yokuhlola imicabango.
Lokho kusho ukuthi ukwengeza imvume ku-'reporter'@'%' kungase kungashintshi lutho uma isikhathi siziqinisekisile njengo-'reporter'@'10.90.0.23'. Ukulungisa kufanele kwehlele kumugqa okhethiwe, yingakho ukuhlonza i-akhawunti kuza ngaphambi kokuhlela izimvume.
Funda i-akhawunti isikhathi esiyisebenzisayo ngempela
SELECT USER(), CURRENT_USER();
SHOW GRANTS;I-CURRENT_USER() isho i-akhawunti eqinisekise isikhathi; i-USER() ibika lokho umklami akucelile futhi kungase kwehluke. Zisebenzise njengezimibuzo ezijwayelekile zezinga eliphezulu, hhayi ngaphakathi kwenqubo egciniwe enomongo wokuchaza, kungenjalo izimpendulo zichaza umnikazi wenqubo esikhundleni sesikhathi sakho.
Ukungena okuhlulekile akukwazi ukusebenzisa loku, futhi lesi yisimo lapho umphathi kufanele ahlole khona izincazelo zama-akhawunti kanye nobufakazi bokuxhumana kweseva. Kuhlelele lokho: umuntu ohlola ukungena okunqatshiwe ngokuvamile akanaso isikhathi se-SQL angabuza kuso.
Hlukanisa ukufinyeleleka nokuqinisekisa
Umbhalo wephutha ukutshela ukuthi ukuliphi ungqimba. Ukuxhumana okunqatshiwe noma ukuphela kwesikhathi kusho ukuthi umklami akazange afinyelele isilaleli, ngakho i-akhawunti nomfihlo wayo akukona okukhulunywayo okwamanje. Impendulo yokufinyelela okunqatshiwe isho ukuthi iseva iphendulile, okufakazela ukufinyeleleka futhi kukhombisa i-akhawunti, ukufana kosokhaya noma ubufakazi bokungena.
Izidingo zenethiwekhi ziluhlu lwazo: isilaleli esiboshwe ekhelini elihlosiwe hhayi ku-loopback kuphela, ukuhanjiswa okuvunyelwe okuya echwebeni elilungisiwe kanye nomzila wokubuyisa wempendulo. Ngakunye kungase kwehluleke ngokuzimela, futhi umhubhe osebenzayo awusho lutho lwalokho. Isilaleli ku-loopback samukela ukuxhumana kwasendaweni futhi senqaba konke ukuxhumana okukude, okukhiqiza ukuxhumana okunqatshiwe okubonakala njengokuvinjwa kwedonga lomlilo.
Hlola ikheli lokubopha ngaphambi kokuvula ithikithi neqembu lenethiwekhi. I-ss -lntp kusokhaya wesizindalwazi ikhombisa ukuthi yikuphi ikheli nechweba elilalelayo ngempela, futhi lowo mugqa owodwa ususa isigaba esiphelele semicabango.
Lungisa ngobunono, bese uphinda uhlole izinhlangothi zombili
Dala i-akhawunti ehlosiwe efanele usokhaya ngenqubo evunyelwe yinhlangano, ngobufakazi obuvela esitolo esisekelwayo hhayi obabiwe obunanyathiselwe ethikithini. Nikeza kuphela imisebenzi yesakhiwo edingwa umsebenzi. Ukuguqula ukungena okukude okuhlulekile kube i-akhawunti ye-root, inqubomgomo yokunikeza konke noma usokhaya wophawu lwedlanzana ojwayelekile kwenza ukuhlolwa kudlule futhi kususa ukulawula obukuhlola. Imvume oyengeze ngokushesha iyona okungekho oyisusayo kamuva.
Phinda uhlole ngesikhathi esisha ngomzila ohlosiwe, bese uhlola izimo ezingezinhle. Umzila okufanele uvinjwe kufanele uhlale uvinjiwe, futhi umsebenzi onganikezwanga kufanele uhlale unqatshiwe. Lokho kuhlola okubili kuhlukanisa i-akhawunti elungisiwe kuleyo enwetshiwe.
Ekugcineni, rekhoda ikheli lomthombo elibonwe kanye negama le-akhawunti ndawonye. Umhubhe unikeza ukufinyeleleka; i-MariaDB isakhetha futhi igunyaza i-akhawunti yayo, futhi umuntu olandelayo udinga womabili amaqiniso ukuze aphinde umphumela wakho.