mysql创建用户并授权:
格式:grant 权限 on 数据库名.表名 to 用户@登录主机 identified by "用户密码";
grant[英][grɑ:nt] 承认; 同意; 准许; 授予;
例1:允许mk用户从localhost登录
mysql> grant all on book.* to [email protected] identified by "123456";
#允许访问book数据库下的所有表, 只能访问book表,而且是同一个服务器的用户
允许mk2用户从任意远端主机连接mysql服务器:
mysql> grant all privileges on *.* to mk2@‘%‘ identified by ‘123456‘ with grant option;
# with grant option 意思是mk2用户可以把自己的权限下放给新创建的用户。 另外,加不加privileges都可以。%指的任意远程主机,不包括本地地址和localhost
Flush privileges; 刷新数据库
测试:
[[email protected] ~]# mysql -u mk2 -h 192.168.1.63 -p123456
mysql> #登录正常
但是:
[[email protected] ~]# mysql -u mk2 -h 192.168.1.63 -p123456 #不能登录
解决方法:
mysql> grant all privileges on *.* to ‘mk2‘@‘192.168.1.63‘ identified by ‘123456‘ with grant option;
[[email protected] ~]# mysql -u mk2 -p123456 #不能登录
解决方法:
mysql> grant all privileges on *.* to ‘mk2‘@‘localhost‘ identified by ‘123456‘ with grant option;
总结: % 指的是任意远程主机,不包括本地地址和localhost。 另外grant是立即生效。不需要执行:mysql> flush privileges; #手动更新命令
只有手动修改了mysql相关字段,才需要执行mysql> flush privileges;
只授权部分权限:
mysql> grant select,insert,update,delete,create,drop on aa.* to ‘custom‘@‘localhost‘ identified by ‘123456‘;
方法二: 直接修改表中权限文件:
mysql> use mysql;
mysql> insert into user (Host,User,Password) values(‘localhost‘,‘grace‘,‘123456‘);
mysql> select Host,User,Password from user where User="grace";
+-----------+-------+----------+
| Host | User | Password |
+-----------+-------+----------+
| localhost | grace | 123456 |
+-----------+-------+----------+
可以看到密码是明文存放的,现在以加密方式存储:
mysql> insert into user (Host,User,Password) values(‘localhost‘,‘grace1‘,password("123456"));
Query OK, 1 row affected, 3 warnings (0.00 sec)
mysql> select Host,User,Password from user where User="grace1";
+-----------+--------+-------------------------------------------+
| Host | User | Password |
+-----------+--------+-------------------------------------------+
| localhost | grace1 | *6BB4837EB74329105EE4568DDA7DC67ED2CA2AD9 |
+-----------+--------+-------------------------------------------+
1 row in set (0.01 sec)
mysql> flush privileges; #刷新权限表,使配置文件生效
或重启mysql 数据库
[[email protected] ~]# service mysqld restart
测试:
[[email protected] ~]# mysql -u grace -p123456 #登录不成功
ERROR 1045 (28000): Access denied for user ‘grace‘@‘localhost‘ (using password: YES)
[[email protected] ~]# mysql -u grace1 -p123456 #登录成功
修改帐户密码:
方法一:使用mysqladmin修改密码
例1:当root没有密码时:
[[email protected] mysql]# mysqladmin -u root -h 192.168.1.63 password ‘123‘
[[email protected] mysql]# mysql -u root -h 192.168.1.63 -p123
例2: 当root已经有密码时:
[[email protected] ~]# mysqladmin -u root password ‘123456‘ -p123
方法二:使用 set password 修改密码:
mysql> SET PASSWORD FOR ‘grace1‘@‘localhost‘ = PASSWORD(‘123456‘);
#注,你的mysql库中已经有记录:grace1‘@‘localhost
mysql> set password = password (‘1234567‘);
mysql> FLUSH PRIVILEGES;
重置root密码:
[[email protected] mysql]# /etc/init.d/mysqld stop
[[email protected] mysql]# mysqld_safe --skip-grant-tables --skip-networking
只在mysql5.1版本有效
重新再开一个终端: 直接就可以进去了, 然后用update修改密码
[[email protected] aa]# mysql #执行
mysql> update mysql.user set password=password(‘123456‘) where host=‘localhost‘ and user=‘root‘;
[[email protected] aa]# /etc/init.d/mysqld restart
Stopping mysqld: [ OK ]