openstack team mailing list archive
-
openstack team
-
Mailing list archive
-
Message #18942
Re: [keystone] mysql question related to OpenStack - RESOLVED
-
To:
Alan Pevec <apevec@xxxxxxxxx>
-
From:
Ahmed Al-Mehdi <ahmed@xxxxxxxxxx>
-
Date:
Mon, 26 Nov 2012 17:46:39 -0600
-
Accept-language:
en-US
-
Acceptlanguage:
en-US
-
Cc:
"openstack@xxxxxxxxxxxxxxxxxxx" <openstack@xxxxxxxxxxxxxxxxxxx>
-
In-reply-to:
<CAGi==UUKd9wQzgaFaHU+MZSV3tm4+q9khH9f2UwNinewvKXLCA@mail.gmail.com>
-
Thread-index:
Ac3MMEfowY45t1RMTuiW/c5d4TcxAg==
-
Thread-topic:
[Openstack] [keystone] mysql question related to OpenStack - RESOLVED
-
User-agent:
Microsoft-MacOutlook/14.2.5.121010
Hi Alan,
Thank you for the info. I was able to figure it out by doing some
googling. (
http://stackoverflow.com/questions/10299148/mysql-error-1045-28000-access-d
enied-for-user-billlocalhost-using-passw ).
You suggestion is one option. Other options are:
1) Delete anonymous user (quoted from above link), but I don't know the
side effect of such an action.
2) By trial and error, I figured out that stating mysql server's IP
address specifically in the command seems to work. This seems to be the
safest without mucking with the db (for folks like me who are not familiar
with mysql).
root@novato:~# mysql -h "localhost" -u"keystoneUser" -p"keystonePass"
"keystone" -ss -e "SELECT id FROM service WHERE type='"compute"';"
ERROR 1045 (28000): Access denied for user 'keystoneUser'@'localhost'
(using password: YES)
root@novato:~#
root@novato:~#
root@novato:~# mysql -h "10.176.20.102" -u"keystoneUser"
-p"keystonePass" "keystone" -ss -e "SELECT id FROM service WHERE
type='"compute"';"
f5919383a5da4d6a9513e1318eccbf0a
Regards,
Ahmed.
On 11/26/12 3:34 PM, "Alan Pevec" <apevec@xxxxxxxxx> wrote:
>2012/11/26 Ahmed Al-Mehdi <ahmed@xxxxxxxxxx>:
>> mysql> select * from mysql.user;
>> | localhost | |
>> | N | N | N |
>
>> | % | keystoneUser |
>>*BB845D9C1AA6F1797AA68A8AB73F7C98BBD6A84A
>> | N | N | N |
>
>http://dev.mysql.com/doc/refman/5.5/en/access-denied.html
>"The reason that this does not work is that the default privileges
>include an entry with Host='localhost' and User=''. Because that entry
>has a Host value 'localhost' that is more specific than '%', it is
>used in preference to the new entry when connecting from localhost!"
>
>So you need to create keystoneUser@localhost
>
>Cheers,
>Alan
References