[aegir] Aegir MySQL non-root permissions

[Steven Jones]

I think you might be able to get away with creating a user that has
all the permissions needed for Aegir, though that user would be, to
most people a 'root' user.

Off the top of my head, you would need something like the ability to:
- Create and drop databases
- Create and delete users
- Grant permissions to those users on those databases.
- Read and write to all those databases.


Regards
Steven Jones
ComputerMinds ltd - Perfect Drupal Websites

Phone : +44(0)1179 68 63 68 Ext 301
Twitter : darthsteven
http://www.computerminds.co.uk



On 3 February 2012 19:00, Tim Wood <tim at buchbinder.org> wrote:
> The Admin install manual page
> (http://community.aegirproject.org/installing/manual) states:
>
> In http://community.aegirproject.org/installing/manual#Review_System_Requirements under
> Database server
>
> It is preferable to use a dedicated (not shared-hosting) server since Aegir
> will create database users and will require the use of a MySQL root user.
>
>
> In http://community.aegirproject.org/installing/manual#Database_configuration
>
> GRANT ALL PRIVILEGES ON *.* TO 'aegir_root'@'%' IDENTIFIED BY 'password'
> WITH GRANT OPTION;
>
>
> So it looks like you may be out of luck...
>
>
> On Fri, Feb 3, 2012 at 1:50 PM, Emmons, Ben - (emmons)
> <emmons at email.arizona.edu> wrote:
>>
>> The Drupal group here is interested in using Aegir to manage some of the
>> sites, but the DBA group won’t allow a MySQL root user.  They’re okay with
>> database create and user create permissions, just not full-blown root
>> access.  I’ve tried to find documentation on what exact SQL permissions are
>> required for the MySQL user but I can find anything other than “root”
>> references.  Does anyone know the exact list of minimum required permissions
>> (SELECT, INSERT, UPDATE, DELETE, CREATE DATABASE, BACKUP DATABASE, CREATE
>> USER, ...)?
>>
>>
>>
>>
>>
>> Regards,
>>
>>
>>
>> BE
>>
>>
>>
>>
>> _______________________________________________
>> aegir mailing list
>> aegir at lists.aegirproject.org
>> http://lists.aegirproject.org/cgi-bin/mailman/listinfo/aegir
>>
>
>
> _______________________________________________
> aegir mailing list
> aegir at lists.aegirproject.org
> http://lists.aegirproject.org/cgi-bin/mailman/listinfo/aegir
>