WedgeCoop / IS4C

Integrated Systems for Co-ops
http://is4c.coop
32 stars 17 forks source link

MySQL bind-address #1

Closed jdpurdyvi closed 14 years ago

jdpurdyvi commented 14 years ago

The default server configuration allows the MySQL default bind-address of 127.0.0.1 to persist. With the bind-address set to 127.0.0.1 no external connections are allowed. Probably not what we want?

maxolasersquad commented 14 years ago

I think we need an interface on fannie to name each Lane and list its IP address. We could then do some configuration to grant the necessary permissions to the necessary users on those IP addresses. In my setup I had to give each computer a static IP address (which seems obvious, but could probably be documented somewhere.) Perhaps the install could ask for the static IP address and then update the mysql.conf file accordingly.

jdpurdyvi commented 14 years ago

That's a solid idea. We could probably expand it to include specific user:password combinations from each lane. If the server account has enough privileges, the admin page could issue grant commands in mysql instead of relying on modifying mysql.conf.

1robert commented 14 years ago

I have also thought about this. I have put a constant in fannies ini file which contains a string of the static ips of the lanes on the network. When synchronisation of data is called it checks which lanes are on line before trying to update the lane databases. I havent finished it yet because my attention has been focused on the problem with the scale reader and php exec function on the lanes.

It is probably a good idea to make the lane no equal its ip address on the network to make for easier configuration. Another thing to remember is that the fannie mysql user must have access to all ips on the network so create a user like is4c@* good to use a password too. Got caught up on that for a while!!

maxolasersquad commented 14 years ago

I think that ideally post-install, all the user should have to do is put in the server's IP address and some authentication credentials and they should be good to go. I'm thinking about moving the configuration options into a table that then gets read by the ini.php file. We could also have these settings in a table on the server that can be configured and pushed from the server. This would streamline setup and centralized management.

jdpurdyvi commented 14 years ago

Marking the bind-address issue as closed. The current installation scripts effectively handle the issue during setup, and any further improvements are unrelated to this specific issue.