<> Pour toute installation [[MySQL]], suivre les directives de la page principale . Quelques réglages, paramètres à ne pas oublier. == Aperçu utilisateurs et hôte == {{{ mysql> select Host,user from user; +-----------+------------------+ | Host | user | +-----------+------------------+ | 10.45.33.%| nssread | | 10.45.33.%| nssreads | | 127.0.0.1 | root | | 192.168.% | nssread | | 192.168.% | nssreads | | localhost | debian-sys-maint | | localhost | nssadmin | | localhost | nsscreate | | localhost | nssread | | localhost | nssreads | | localhost | root | | named | root | +-----------+------------------+ }}} == Authentification centralisée == * Une base pour la gestion : `auth` === Les utilisateurs et leurs permissions === * Issue de la base `mysql` * Permissions similaires pour `10.45.33.%` {{{ mysql> show grants for nssread@'192.168.%'; +--------------------------------------------------------------------------------------------------------------------------------------------------+ | Grants for nssread@192.168.% | +--------------------------------------------------------------------------------------------------------------------------------------------------+ | GRANT USAGE ON *.* TO 'nssread'@'192.168.%' IDENTIFIED BY PASSWORD ':P' | | GRANT SELECT (username, gid) ON `auth`.`grouplist` TO 'nssread'@'192.168.%' | | GRANT SELECT (name, gid) ON `auth`.`groups` TO 'nssread'@'192.168.%' | | GRANT SELECT (shell, expire, warn, flag, gid, homedir, username, inact, gecos, lstchg, max, min, uid) ON `auth`.`users` TO 'nssread'@'192.168.%' | +--------------------------------------------------------------------------------------------------------------------------------------------------+ mysql> show grants for nssreads@'192.168.%'; +-----------------------------------------------------------------------------------------------------------------+ | Grants for nssreads@192.168.% | +-----------------------------------------------------------------------------------------------------------------+ | GRANT USAGE ON *.* TO 'nssreads'@'192.168.%' IDENTIFIED BY PASSWORD ':P' | | GRANT SELECT ON `auth`.* TO 'nssreads'@'192.168.%' | +-----------------------------------------------------------------------------------------------------------------+ }}}