Change database root account
|
adrian_vg
Joined: 2009-07-04
Posts: 21 |
Posted: Sun, 2009-07-19 17:32
|
|
When I installed Gallery2 for the first time, there was a recommendation to change the root account name for accessing to the picture gallery database, complete with step-by-step-instructions. Now I can't find that blasted thing again... Can you guys help? Searching the codex and this forum doesn't give anything useful. Thanks. |
|
Posts: 16503
You mean the admin username?
Login, click on Your Account
Maybe this was the article you were referring to: http://codex.gallery2.org/Gallery2:Security
____________________________________________
Like Gallery? Like the support? Donate now!!! See G2 live here
Posts: 21
No, not for logging in to Gallery, the mysql admin account.
No, sorry. Already checked there.
Never mind, I'll just run the installer again and see if I can find it. Thanks.
--
/AvG
Posts: 16503
Then I can almost guarentee you didn't get that warning with installing Gallery. That sounds more like when you were installing MySQL. Perhaps you installed on Debian or Ubuntu or Fedora and did something like apt-get install gallery2. And during the MySQL install it had something about that.
If so, I'd advice un-doing that anyway and installing Gallery manually. I've seen nothing but problems when it comes to upgrading either the system (Ubuntu 7.04 to 8.04 or something like that) or upgrading Gallery, though 2.3 is most likely the last release. Sure install Apache, MySQL, PHP, etc with your distribution's package system, but again, I've seen nothing but problems when people have gone to upgrade or just install the automatic upgrades. It seems to break Gallery, a lot.
Hit google http://www.google.com/search?q=mysql+change+root+password
____________________________________________
Like Gallery? Like the support? Donate now!!! See G2 live here
Posts: 21
Hmm... It might've been in the Gallery wiki. Oh, well, I'll see if I can get it done some other way. This is on linux BTW, CentOS to be exact. I install stuff with yum. Gallery however wasn't available over yum with the repos I use, so I downloaded the tar.gz and installed from that.
Already tried that, ie changing the admin account name, the password I can handle, it's the admin name I want to change.
If I remember correctly, there was a link in the installer that mentioned steps one could take to secure both Gallery and the mysql db. Think I got it from there. Anyway, I'll look and search some more.
Thanks for your help and comments!
--
/AvG
Posts: 16503
Trust me, you do NOT want to install Gallery that way. Everything else on the planet sure, well I'm not sure about other web based apps, but who ever "maintains" the Gallery in the repos for those distributions doesn't seem to actually test. Or only tests on their system and not some fresh, un-customized install of the distro that 99% of the user base is going to be using.
Ah, helps if I click on Your Account to look there. I see now you can't change the admin username there. Honestly I wouldn't worry about it too much. You can edit that on install. You can edit it in the database, I'd have to look up the table name. You can create another user, put that person in the Site Admin group and use that. I wouldn't delete the original admin user, but that's just me. You could do that, so long as you change the ownership of any thing for that user to the new "admin".
____________________________________________
Like Gallery? Like the support? Donate now!!! See G2 live here
Posts: 21
I think we're speaking past each other. 8-)
I did not install Gallery over yum, apt or whatever package systems there are, but manually directly from the tar.gz I got from the Gallery web site. The only thing I installed with yum was mysql and the supporting graphics packages such as gd, netpbm, imagemagick and so on.
I think we might be misunderstanding here each other on this one too.
The admin account you mention, is only for logging in to Gallery itself via a web browser, right?
The account I talk about is the one I set on the command line for mysql database itself. Something like the example on http://blogs.koolwal.net/2009/03/19/tip-changing-usernamepassword-of-a-mediawiki-user-on-linux/, specifically the command
mysql>UPDATE user SET user_password=md5(concat(user_id,'-',md5('mypassword'))) where user_id='2';
except I don't recall there being any "concat" and "md5" stuff in the Gallery wiki or Gallery installer hint.
--
/AvG
Posts: 16503
Ah, the database user. config.php is the only place in Gallery that information is stored. Just edit that file. Of course you have to specify a valid username. Gallery does not create or manage the MySQL usernames and passwords. You'll have to do that either through MySQL or your control panel. (again, google for that part)
http://gallery.menalto.com/node/89185#comment-314476
There is nothing anywhere in Gallery's docs or install that I've seen that ever mentioned anything about any warning for the database username. Maybe it's coded in there, but I haven't seen it.
See the database setup step and the screenshot http://codex.gallery2.org/Gallery2:How_do_I_Install_Gallery2
____________________________________________
Like Gallery? Like the support? Donate now!!! See G2 live here
Posts: 21
The link above ("MySQL Instructions") is/was part of what I was referring to. Thanks. I'll go from there. Will post back if I ever find the thing I wanted. Thanks again.
--
/AvG
Posts: 21
After some consideration and reading up on mysql, I think it's okay after all as it is. From http://dev.mysql.com/doc/mysql-security-excerpt/5.1/en/changing-mysql-user.html one can chose to use a different user name with mysql, so that's what I did.
Thanks for your help.
--
/AvG