加入收藏 | 设为首页 | 会员中心 | 我要投稿 聊城站长网 (https://www.0635zz.com/)- 智能语音交互、行业智能、AI应用、云计算、5G!
当前位置: 首页 > 站长学院 > MySql教程 > 正文

管理MySQL用户重要有哪些功能

发布时间:2023-09-12 14:43:34 所属栏目:MySql教程 来源:
导读:下文主要给大家带来管理MySQL用户主要有哪些功能,希望这些文字能够带给大家实际用处,这也是我编辑管理MySQL用户主要有哪些功能这篇文章的主要目的。好了,废话不多说,大家直接看下文吧。

1. MySQL用户管理
下文主要给大家带来管理MySQL用户主要有哪些功能,希望这些文字能够带给大家实际用处,这也是我编辑管理MySQL用户主要有哪些功能这篇文章的主要目的。好了,废话不多说,大家直接看下文吧。
 
1. MySQL用户管理
 
'user'@'host';
 
 host:IP、主机名、NETWORK、%(任意长字符),_(任意单个字符)    
 
skip_name_resolve={ON|OFF} 跳过主机名解析
 
 [root@node2 ~]# vim /etc/my.cnf
 
 skip_name_resolve=ON
 
2.查看用户
 
示例:
 
1
 
MariaDB [mysql]> SELECT User,Host,Password FROM user;
 
3.创建用户
 
CREATE USER  'user'@'host' [IDENTIFIED BY [PASSWORD] 'password'] [,'user'@'host' [IDENTIFIED BY [PASSWORD] 'password']...]
 
示例:
 
1
 
MariaDB [(none)]> CREATE USER 'tom'@'127.0.0.1' IDENTIFIED BY 'liumanlin' , 'jerry'@'%' IDENTIFIED BY 'liumanlin';
 
4.重命名:RENAME USER
 
RENAME USER old_user TO new_user[, old_user TO new_user] ...
 
示例:
 
1
 
MariaDB [mysql]> RENAME USER 'tom'@'127.0.0.1' TO 'jerry'@'172.18.%.%';
 
5.删除用户
 
DROP USER 'user'@'host' [, 'user'@'host'] ...
 
示例:

MariaDB [mysql]> DROP USER 'jerry'@'%';
 
MariaDB [mysql]> DROP USER ''@'localhost';
 
6.让MySQL重新加载授权列表
 
FLUSH PRIVILEGES;
 
示例:
 
1
 
MariaDB [mysql]> FLUSH PRIVILEGES;
 
7.修改用户密码
 
(1) SET PASSWORD [FOR 'user'@'host'] = PASSWORD('cleartext password'); PASSWORD是MySQL内建加密函数
 
示例:
 
MariaDB [mysql]> SET PASSWORD FOR 'root'@'localhost' = PASSWORD('liumanlin');
 
MariaDB [mysql]> FLUSH PRIVILEGES;
 
(2) UPDATE mysql.user SET Password=PASSWORD('cleartext password')  WHERE User='USERNAME' AND Host='HOST';
 
示例:
 
MariaDB [mysql]> UPDATE user SET Password=PASSWORD('liumanlin') WHERE User='root' AND Host='127.0.0.1';
 
MariaDB [mysql]> FLUSH PRIVILEGES;
 
(3) mysqladmin -uUSERNAME -hHOST -p  password 'NEW_PASS'
 
示例:
 
1
 
[root@node2 ~]# mysqladmin -h227.0.0.1 -uroot -p password 'liumanlin';
 
8.忘记管理员密码的解决办法
 
(1) 启动mysqld进程时,使用--skip-grant-tables和--skip-networking选项
 
示例:
 
CentOS 7:

[root@node2 ~]# vim /usr/lib/systemd/system/mariadb.service
 
 ExecStart=/usr/bin/mysqld_safe --basedir=/usr --skip-grant-tables --skip-networking
 
[root@node2 ~]# systemctl daemon-reload
 
[root@node2 ~]# systemctl restart mariadb.service
 
CentOS 6:
 
1
 
[root@node2 ~]# vim /etc/init.d/mysqld 同理
 
(2) 通过UPDATE命令修改管理员密码
 
示例:
 
MariaDB [mysql]> UPDATE user SET Password=PASSWORD('liumanlin') WHERE User='root' AND Host='127.0.0.1';
 
[root@node2 ~]# vim /usr/lib/systemd/system/mariadb.service
 
ExecStart=/usr/bin/mysqld_safe --basedir=/usr
 
(3) 以正常方式启动mysqld进程;
 
示例:

[root@node2 ~]# systemctl daemon-reload
 
[root@node2 ~]# systemctl restart mariadb.service
 
9.授权:GRANT
 
GRANT priv_type [(column_list)] [, priv_type [(column_list)]] ...
 
ON [object_type] priv_level
 
TO user_specification [, user_specification] ...
 
[REQUIRE {NONE | ssl_option [[AND] ssl_option] ...}]
 
[WITH with_option ...]
 
object_type(对象类型):
 
 TABLE
 
 | FUNCTION
 
 | PROCEDURE
 
priv_level:
 
 *
 
 | *.*(所有库的所有表)
 
 | db_name.*(指定库的所有表)
 
 | db_name.tbl_name(指定库的指定表)
 
 | tbl_name(指定表)
 
 | db_name.routine_name(指定库的指定函数)
 
ssl_option:
 
 SSL
 
 | X509
 
 | CIPHER 'cipher'
 
 | ISSUER 'issuer'
 
 | SUBJECT 'subject'    
 
with_option:
 
 GRANT OPTION
 
 | MAX_QUERIES_PER_HOUR count
 
 | MAX_UPDATES_PER_HOUR count
 
 | MAX_CONNECTIONS_PER_HOUR count
 
 | MAX_USER_CONNECTIONS count
 
示例1:

MariaDB [mysql]> GRANT CREATE ON hidb.* TO 'jerry'@'172.18.%.%';
 
[root@node2 ~]# mysql -ujerry -h272.18.67.12 -p
 
MariaDB [(none)]> CREATE DATABASE hidb;
 
MariaDB [(none)]> use hidb;
 
MariaDB [hidb]> CREATE TABLE tbl1 (name CHAR(20));
 
MariaDB [hidb]> CREATE INDEX test ON tbl1(name);
 
ERROR 1142 (42000): INDEX command denied to user 'jerry'@'172.18.67.12' for table 'tbl1' (无权创建索引,用以下方法)
 
MariaDB [mysql]> GRANT INDEX ON hidb.* TO 'jerry'@'172.18.%.%';
 
MariaDB [mysql]> SHOW GRANTS  FOR 'jerry'@'172.18.%.%';
 
MariaDB [hidb]> CREATE INDEX test ON tbl1(name); (授权成功)
 
示例2:

MariaDB [mysql]> CREATE USER 'tom'@'172.18.%.%' IDENTIFIED BY 'liumanlin';
 
[root@node2 ~]# mysql -utom -h272.18.67.12 -p (可正常登录)
 
MariaDB [mysql]> GRANT ALL ON hidb.* TO 'tom'@'172.18.%.%' REQUIRE SSL; (使用ssl授权登录)
 
MariaDB [mysql]> SHOW GRANTS FOR 'tom'@'172.18.%.%';
 
MariaDB [mysql]> FLUSH PRIVILEGES;
 
[root@node2 ~]# mysql -utom -h272.18.67.12 -p
 
Enter password:
 
ERROR 1045 (28000): Access denied for user 'tom'@'172.18.67.12' (using password: YES) (无法连接,需指明ssl证书)
 
示例3:
 
MariaDB [mysql]> SHOW GLOBAL VARIABLES LIKE '%ssl%';
 
+---------------+----------+
 
| Variable_name | Value    |
 
+---------------+----------+
 
| have_openssl  | DISABLED |
 
| have_ssl      | DISABLED |
 
| ssl_ca        |          |
 
| ssl_capath    |          |
 
| ssl_cert      |          |
 
| ssl_cipher    |          |
 
| ssl_key       |          |
 
+---------------+----------+
 
10.查看授权:SHOW GRANTS
 
SHOW GRANTS [FOR 'user'@'host']
 
示例:
 
MariaDB [mysql]> SHOW GRANTS FOR 'tom'@'172.18.%.%';
 
11.取消授权:REVOKE
 
REVOKE  priv_type [(column_list)][, priv_type [(column_list)]] ...
 
ON [object_type] priv_level
 
FROM  'user'@'host' [,  'user'@'host'] ...
 
REVOKE ALL PRIVILEGES, GRANT OPTION
 
FROM user [, user] ...
 
示例:

MariaDB [mysql]> REVOKE CREATE VIEW ON hidb.* FROM 'tom'@'172.18.%.%';
 
MariaDB [mysql]> SHOW GRANTS FOR 'tom'@'172.18.%.%';
 
MariaDB [mysql]> FLUSH PRIVILEGES;
 
 

(编辑:聊城站长网)

【声明】本站内容均来自网络,其相关言论仅代表作者个人观点,不代表本站立场。若无意侵犯到您的权利,请及时与联系站长删除相关内容!

    推荐文章